This role maintains visibility into potential threats and leading incident response efforts. This role supports the protection of the confidentiality, integrity, and availability of Council systems, applications, and data. The role collaborates with Information Security team members, IS teams, and business partners to investigate and respond to security incidents in alignment with Council policies, procedures, and standards. The role also supports vulnerability management activities by scanning systems, network devices, and applications to identify and prioritize vulnerabilities, and by coordinating remediation efforts with IS teams. The role provides direct support to business users, helping them remain productive while complying with security requirements.

Responsibilities

· Monitor and investigate alerts; lead incident response per policies, procedures, and standards.

· Scan systems, devices, and applications for vulnerabilities; prioritize and coordinate remediation.

· Respond to security tickets; provide direct support to business users, balance productivity with security requirements.

· Maintain visibility into threats; produce reports and metrics for stakeholders.

· Assist in control validation and compliance activities; track exceptions and risk treatments.

· Document incidents, lessons learned, and playbooks; update detection content.

· Provide knowledge transfer

Qualifications

• Bachelor’s degree
• 3 years of experience in Security role
• Experience with Microsoft 365 Defender and other endpoint security tools
• Skilled in reading and writing scripts using languages such as PowerShell and Python
• Knowledge of vulnerability management concepts, scoring, and prioritization

Pay: $81,647.31 - $140,000.00 per year

Work Location: Remote