Senior Security Operations Specialist

The Senior Security Operations Specialist will be responsible for the design, implementation, configuration, and optimization of security controls across the organization’s on-premises and cloud environments. While the SOC operations and SIEM monitoring are managed by an outsourced service provider, this role will act as the internal technical authority for reviewing SOC alerts, validating incidents, implementing security recommendations, and ensuring that all preventive and detective controls are properly tuned and effective. The specialist will Services closely with IT, netServices, and application teams to ensure secure configurations and continuous improvement of the overall security posture.

Key Responsibilities

• Act as the primary technical resource for security operations and control implementation within the organization.
• Review, validate, and investigate alerts or incidents escalated by the outsourced SOC.
• Implement and fine‑tune security controls including firewalls, IPS / IDS, endpoint protection, and cloud security configurations.
• Manage and maintain endpoint security tools such as EDR / XDR, antivirus, and DLP to ensure effective protection and response.
• Design and implement cloud security configurations (Azure, AWS, or GCP), ensuring compliance with organizational standards and best practices.
• Configure, manage, and optimize Cisco ISE for netServices access control, posture validation, and identity‑based access enforcement.
• Collaborate with SOC service providers to review and act on incident reports, threat intelligence, and recommended actions.
• Conduct detailed security investigations, root cause analysis, and document findings for future reference.
• Implement and maintain firewall policies, VPN configurations, and intrusion prevention rules according to security best practices.
• Regularly review and update security configurations to ensure alignment with new threats and compliance requirements.
• Coordinate vulnerability management activities with relevant IT and infrastructure teams for timely remediation.
• Develop and maintain security documentation, including configurations, standards, and operational procedures.
• Assist in audit and compliance reviews, providing evidence of implemented controls and mitigations.
• Continuously assess new technologies and recommend security enhancements to strengthen protection layers.
• Support awareness and training initiatives by promoting good security practices among technical teams.

Requirements

#J-18808-Ljbffr