Responsibilities

• Lead implementation and management of endpoint security platforms (EDR/XDR) including tuning, threat detection and response improvements.
• Work closely with SOC team to investigate alerts, respond to incidents and enhance detection rules and playbooks.
• Analyze and act on Indicators of Compromise (IoCs) using threat intelligence to proactively detect and mitigate threats.
• Manage and optimize DLP solutions to prevent data exfiltration across endpoints and platforms.
• Implement and maintain platform security controls including DNS security, web filtering and browser security hardening.
• Perform continuous endpoint hardening, vulnerability remediation and attack surface reduction.
• Monitor and respond to DDoS alerts and network‑based threats, coordinating with infrastructure teams.
• Lead IAM platform operations including SailPoint IGA, PAM solutions and endpoint privilege management.
• Con...