SeniorOperationalSecurityEngineer

Own and operate the firm’s core protective and detective security controls across endpoint

identity and data security domains

Convert multiple best-efforts operational security activities into sustainable

auditable and scalable services

Own and operate Endpoint Detection & Response (EDR) tooling including alert triage

threat containment and endpoint health monitoring

Enforce endpoint security baselines

compliance checks and hardening standards

Manage anti-malware controls

Configure and manage firewall and Web Application Firewall (WAF) controls

and remote access security

Maintain baseline security standards across endpoint environments

Own email security controls

proxy controls and malicious URL/content blocking

Administer and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions

Manage Privileged Access Management (PAM/PIM) controls

mover and leaver (JML) processes

Run periodic access review and recertification cycles

Support customer-facing access controls and authentication governance

Manage Data Loss Prevention (DLP) controls

Oversee data classification

archiving and disposal controls

Support insider threat monitoring controls and escalation procedures

Manage encryption standards and certificate lifecycle

Triage and analyse security alerts

Coordinate with the SOC for detection and response

Lead threat hunting activities

Own and maintain the XDR platform

Investigate security incidents

anomalous activity and SOC escalations

Develop and maintain incident response runbooks

Own ransomware readiness and business resilience testing activities

Manage security automation and SOAR playbook development

Provide operational interface with the SOC

accurate and timely reporting covering endpoint health

network control status

IAM control health and incident metrics

Contribute security operations data and metrics to the master CISO reporting pack