Cyber Security - Manager

Role & responsibilities The candidate must demonstrate advanced proficiency with the following platforms and technologies: Threat Intelligence Platforms: Microsoft Sentinel, Splunk Enterprise Security, DTEX InTERCEPT, Proofpoint Insider Threat Management, Exabeam Advanced Analytics, Securonix UEBA, Recorded Future, Anomali ThreatStream SIEM and SOAR: Splunk, Microsoft Sentinel, IBM QRadar, Palo Alto XSOAR, Swimlane Endpoint Detection and Response: CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black Digital Forensics Tools: EnCase, FTK (Forensic Toolkit), Axiom (Magnet Forensics), Volatility, X-Ways Forensics Log Analysis: Expert-level understanding of Windows Event Logs (Security, System, PowerShell, Sysmon), Linux audit logs, Active Directory and Azure AD sign-in and audit logs, firewall and proxy logs, DNS query logs, and email transport logs Data Loss Prevention: Microsoft Purview, Symantec DLP, Digital Guardian Cloud Security: Microsoft 365 Compliance Centre, Google Workspace security logs, AWS CloudTrail Shift: 2pm-11pm