- Develop and execute Security strategy and roadmap. Identify capability gaps, emerging risks, and opportunities to improve
security maturity, and translate business and cybersecurity objectives into prioritized technical initiatives.
- Define and maintain security architecture principles, patterns, and reference architectures across cloud and enterprise IT. Lead
security architecture reviews for new technologies, applications, infrastructure, and significant changes, providing risk-based
design requirements and recommendations.
- Design, implement, and continuously improve security controls across Azure, Microsoft 365, Microsoft Defender, Entra ID, Intune,
endpoints, servers, networks, and other enterprise technologies.
- Develop and maintain security standards, secure configuration baselines, architecture requirements, hardening guidance, and
engineering documentation. Ensure technical controls align with the organization's security strategy and frameworks such as NIST
Cybersecurity Framework 2.0.
- Lead vulnerability and security exposure management across enterprise IT systems, including identification, technical risk
assessment, prioritization, mitigation strategy, remediation coordination, and risk tracking. Evaluate emerging vulnerabilities
and threats to determine potential organizational impact.
- Evaluate security technologies and make recommendations regarding architecture, adoption, configuration, integration, consolidation, and retirement. Ensure security investments provide appropriate risk reduction while balancing operational requirements, integration complexity, and cost.
- Partner with Security Operations to improve detection, logging,SIEM, EDR/XDR, and security monitoring integrations. Provide
senior technical expertise during significant cybersecurity incidents, including containment, remediation, recovery, and implementation of longer-term corrective controls.
- Serve as a senior cybersecurity technical authority and trusted advisor to Security, IT Operations, Enterprise Architecture,
Business Applications, and technology leadership. Provide technical direction on complex security issues, mentor other
engineers, influence secure technology decisions, and work with MSSP/MDR, network, cloud, and other external partners to
ensure security requirements are effectively implemented.