Report this job

---

What is the problem? *

Incorrect company
Incorrect location
Job is expired
Job may be a scam
Other

Hi,Hope You are doing well,Please find the job description below and kindly let me know if it suits you.JOB ROLE: Cybersecurity ArchitectLOCATION: Frisco, TX/Seattle, WA- RemoteINTERVIEW: MS TeamsDURATION: 6 months+Job Description: Designing & implementing preventive security, Defender policies Implementing threat-hunting & threat-management using Sentinel, ADX, LogAnalytics Enable Threat Problem Management Looking for someone who can help develop our threat detection and threat management capabilities for our cloud landscape (Azure, AWS, GCP This person should be able to lead design and development of threat detection/hunting solutions, threat management solutions and cloud-provider-native features/products. This person should be able to guide and enable team to deliver on preventative security and pre-emptive mitigations.This person will need to be hands-on with actual experience building and operating threat-detection & threat-management practice in a production environment. Designing & implementing preventive security, Defender policies Implementing threat-hunting & threat-management using Sentinel, ADX, LogAnalytics Designing & implementing and operating security incident management process & platform as part of threat management Designing & implementing preventative policies, runbooks/SOPs for resolution, automated resolution framework, and enforcement solutions Enable Threat Problem Management: Aligning other parts of security domain (IDM, IAM, Data security, etc with detected/discovered threats or security incidents to ensure shift-left in threat management. Designing & implementing infra-authentication & authorization, infrastructure automation (infra-as-code, gitops), config management Designing & implementing policies for data encryption, data access, DB logging, data retention Designing & implementing for secrets & key management, auto log enablement, log aggregation for DLP/SIEM Our platform of choice for most of SIEM/SOAR capability development is Azure; hence that is the area of expertise we will be interested in.