Epicareer Might not Working Properly
Learn More

InfoSecOps Engineer

Salary undisclosed

Apply on


Original
Simplified

Position Responsibilities

    -Threat Detection & Monitoring:
      -Utilize SIEM, IDS/IPS, and EDR tools to monitor and detect potential security threats and incidents in real-time.
    -Incident Response & Threat Hunting:
      -Lead the response to security incidents, including investigation, containment, remediation, and post-incident analysis. Conduct proactive threat hunting to identify and mitigate risks before they escalate.
    -Vulnerability Management:
      -Perform regular vulnerability scans, assess risks, and work with IT teams to apply patches and mitigate identified vulnerabilities.
    -Risk Assessment & Mitigation:
      -Conduct comprehensive risk assessments, identify potential threats, and implement measures to mitigate identified risks.
    -Policy Development & Compliance:
      -Develop, implement, and maintain security policies, standards, and procedures. Ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, NIST, ISO 27001).
    -Security Tool Management:
      -Manage and fine-tune security tools, including firewalls, SIEM systems, and endpoint protection platforms. Ensure tools are optimized for threat detection and response.
    -Cloud Security:
      -Implement and monitor security best practices for cloud environments (AWS, Azure, Google Cloud), including IAM, encryption, network security, and cloud-native security tools (e.g., AWS GuardDuty, AWS WAF and Shield, Azure Security Center).
    -Log Analysis & Automation:
      -Analyze logs from various sources (network devices, servers, applications) to identify anomalies and automate routine tasks using scripting languages (e.g., Python, Bash).
    -Security Awareness Training:
      -Design and deliver training programs to educate employees on security best practices and promote a security-first culture within the organization.