Cyber Security Engineer

Microsoft 365 Security Administration

·       Configure and manage:

o   Microsoft Entra ID Security

o   Conditional Access Policies

o   Multi-Factor Authentication (MFA)

o   Secure Score Improvement Initiatives

·       Implement and maintain:

o   SPF

o   DKIM

o   DMARC

o   Email Authentication Policies

·       Monitor email threats including:

o   Phishing

o   Malware

o   Business Email Compromise (BEC)

o   Spoofing attacks

·       Review and improve Microsoft Secure Score recommendations.

Trend Micro Vision One Security Management

Endpoint Security

·       Manage Trend Vision One Endpoint Security policies.

·       Monitor endpoint health and protection status.

·       Investigate malware outbreaks and suspicious activities.

·       Ensure endpoint compliance and policy enforcement.

·       Deploy security policies and updates across endpoints.

Email Security

·       Administer Trend Vision One Email Security services.

·       Analyze email security events and alerts.

·       Tune antispam, anti-malware, and threat detection policies.

·       Investigate phishing campaigns and email-related incidents.

·       Coordinate response to email security threats.

Vulnerability Management

·       Conduct regular vulnerability assessments.

·       Analyze vulnerability scan results.

·       Prioritize remediation activities based on risk level.

·       Track remediation progress with infrastructure and application teams.

·       Verify closure of identified vulnerabilities.

·       Prepare vulnerability management reports and dashboards.

Penetration Testing & Security Assessment

·       Coordinate internal and external penetration testing engagements.

·       Assist security consultants during testing activities.

·       Review penetration testing reports.

·       Develop remediation plans for identified findings.

·       Validate implementation of corrective actions.

·       Perform security assessments of new systems and applications.

Security Monitoring and Incident Response

·       Monitor security alerts and incidents.

·       Investigate unusual activities and security events.

·       Respond to cybersecurity incidents according to established procedures.

·       Document incidents and remediation activities & conduct root cause analysis.

User Security Awareness

·       Support cybersecurity awareness programs.

·       Conduct phishing simulation exercises.

·       Communicate security best practices to employees.

·       Assist in developing security awareness content and training materials.