Typical responsibilities
- Harden cloud, network and application environments.
- Run vulnerability scans and manage remediation with engineering teams.
- Set up logging, threat detection and alerting.
- Respond to security incidents and lead the investigation.
- Manage identity, access and secrets policies.
- Support compliance work such as SOC 2, ISO 27001 or HIPAA.
- Train the team on secure practices and review risky changes.






