Security Engineer

Serve as the Security Operations and Technical Lead, spearheading security architecture and threat detection across enterprise network, cloud, and endpoint environments, while driving automated defenses and ISO 27001 compliance.

• Security Operations & SOC Management: Serve as a primary technical lead for the Security Operations Center, overseeing the transition to new providers and defining global requirements for threat detection and response.
• SIEM Log Analytics: Manage and optimize log analytics within a co-managed SIEM environment to ensure comprehensive threat visibility.
• Infrastructure Hardening: Drive the ""Digital Perimeter Hardening"" initiative, focusing on network path optimization and re-routing strategies between switches and firewalls.
• Endpoint Integrity: Manage the lifecycle and integrity of global endpoints using tools such as Trellix and Rapid7, ensuring consistent patching and permission standards.
• Network Security Architecture: Implement and manage advanced security solutions, including Fortinet Firewalls and Cisco ISE (Identity Services Engine), to enforce granular network access control.
• Threat Mitigation: Develop and maintain automated threat mitigation solutions, such as dynamic SSLVPN brute-force protection leveraging FortiAnalyzer, FortiManager, and custom API integrations.
• Network Zoning: Lead the ""Network Zoning"" initiative by performing global firewall policy assessments and creating baseline standards for traffic flow control.
• Cloud & Hybrid Security: Design and maintain secure connectivity for cloud environments (Azure, GCP, AWS), including the management of Azure VWAN and other cloud-native security services.
• Compliance & Audit: Participate in and support ISO 27001 internal and external audits to ensure global compliance with international security standards.