Platform Security Lead

Key Responsibilities

• Serve as a senior incident responder, addressing emerging threats across the environment.
• Collaborate with infrastructure, network, and cross-functional teams to contain, investigate, and remediate security incidents.
• Conduct root cause analysis and participate in forensic investigations as needed.
• Enhance system visibility by expanding logging coverage and implementing additional monitoring capabilities.
• Maintain, update, and regularly test incident response runbooks, containment strategies, and escalation protocols.
• Lead the end-to-end vulnerability management process for ION Markets systems, from identification to remediation.
• Provide support for security architecture reviews of developed systems to ensure alignment with best practices.
• Stay up to date with the latest security threats, news, intelligence, tactics, techniques, and vulnerabilities; conduct research and analysis to assess potential impact and exposure.
• Perform proactive threat hunting activities, and manage the triage, investigation, and escalation of security alerts.
• Develop Standard operating procedures for operations & architecture activities.

Required Skills, Experience and Qualifications

• Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:
• Pen Test+, Security+, OSCP, CCSP, CEH, GCIH, GMON.
• 7+ years' experience in Information Security or Security Architecture roles.
• Must have fundamental programming/scripting capabilities (e.g. python, PowerShell, bash, etc.).
• Must have in-depth understanding of operating systems (Windows/Linux).
• A team player with the ability to work independently and unsupervised.
• Ability to own delegated tasks and see them through to completion.
• Ability to manage time and prioritize work to maximize productivity.
• Excellent communication skills (both written and verbal).
• Exceptional attention to detail and quality.
• Excellent problem-solving techniques and trouble analysis skills.
• Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux).
• General IT networking concepts, protocols, standards and network security concepts, controls, and best practices.
• Cryptography fundamentals and data security controls and best practices.
• Forensic investigation techniques.
• Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.