Security Operations Lead

The Security Operations Lead will monitor, analyze, and investigate security alerts from systems like SIEM, and tune detection rules to improve accuracy. They will collaborate with teams to ensure proper configuration and use of security tools such as Wazuh, Graylog, FortiClient, FortiManager, SonarQube, and Rapid7. Responsibilities include researching and implementing vulnerability management solutions, conducting vulnerability scans across infrastructure, applications, and endpoints, and analyzing/prioritizing vulnerabilities for remediation. The role also involves investigating security incidents, determining root causes, coordinating response efforts, updating incident response playbooks, and conducting post-incident analysis. Additionally, the lead will implement and maintain technical security controls for ISO 27001 compliance, provide technical evidence for audits, support risk treatment plans, and research/recommend new security tools and solutions for continuous improvement, including initiatives for secure configuration management, endpoint hardening, and cloud security.