IT Support Services lead (Cybersecurity)

The duties listed below are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to this class.

Lead enterprise cybersecurity architecture and strategy.

Manage Palo Alto Firewalls, Prisma Access, Cortex XDR and XSOAR.

Drive SOC operations including monitoring and incident response.

Implement SIEM tools such as Microsoft Sentinel, Splunk, QRadar.

Perform threat hunting, incident investigations, and analysis.

Implement Email Security solutions including Defender, Proofpoint, Mimecast.

Manage Endpoint Security (EDR/XDR).

Conduct vulnerability assessments and risk mitigation.

Define and enforce security policies and governance.

Lead IAM solutions (MFA, SSO, PAM).

Ensure compliance (GDPR, HIPAA, ISO 27001).

Support audits and compliance reporting.

Implement Zero Trust security architecture.

Automate security using SOAR (Cortex XSOAR).

Mentor and lead security teams

Serve as Technical Liaison and Advisory to the Service Desk and Applications team for any technical challenges issues.