Role Overview:
Support the day-to-day operation of the company’s security controls — monitoring, vulnerability management, application security testing and audit evidence — under the guidance of senior members of the security team, while building towards independent ownership of technical security topics.
Key Responsibilities:
- Security monitoring: triage SIEM alerts, escalating genuine incidents and helping tune rules to reduce false positives.
- Endpoint security: monitor EDR/XDR consoles, check agent coverage and follow up on detections.
- Vulnerability management: run scans, prepare reports and follow up with system owners until findings are closed.
- Patch and configuration: track patch compliance and verify hardening baselines against agreed standards.
- Application security: run scans, triage results with developers and track remediation.
- Firewall and network security: assist with Fortinet FortiGate policy changes, rule reviews and log analysis.
- Identity and access: support access reviews, MFA enrolment and joiner-mover-leaver checks.
- Cloud security: monitor security posture and configuration alerts in Azure.
- Incident support: assist investigations, collect evidence and document timelines and actions taken.
- Audit and compliance support: gather and organize evidence for internal and external audits and keep the findings tracker current.
- Documentation: maintain procedures, asset and control records, runbooks and technical documentation.
- Awareness: help deliver phishing simulations and security awareness material and handle user queries.
- Reporting: prepare recurring security metrics and dashboards for the security team.