Key Responsibilities

• Lead and manage the response to security incidents, coordinating efforts between the GSOC and local SOCs.
• Lead the incident response team in identifying, managing, and resolving security incidents.
• Develop and maintain incident response plans, playbooks, and procedures.
• Coordinate with internal and external stakeholders to manage and communicate the response to security incidents.
• Conduct regular threat hunting, vulnerability assessments, and risk analyses.
• Coordinate and manage the response to security incidents, including detection, containment, eradication, and recovery.
• Develop, implement, and maintain SOC policies, procedures, and standards.
• Conduct comprehensive assessments of the Active Directory environment, including architecture, configuration, security, and performance.
• Identify vulnerabilities, misconfigurations, and areas for improvement in AD operations.