• Manage and secure cryptocurrency private keys, ensuring best practices for key management. • Implement and enforce policies for key storage and access, including the use of hardware security modules (HSMs) and multi-signature setups. • Secure and audit GCP infrastructure and practices, including IAM roles, security groups, and other GCP security features. • Perform regular security audits and compliance checks to identify and address vulnerabilities. • Set up and manage Multi-Factor Authentication (MFA) for all critical systems. • Monitor and respond to security incidents and alerts, conducting vulnerability assessments and penetration testing. • Perform system administration tasks, ensuring the high availability and reliability of infrastructure. • Participate in on-call rotations to maintain and troubleshoot infrastructure issues. • Develop and maintain security policies, procedures, and documentation. • Conduct security training and awareness programs for staff, keeping up with the latest security trends and technologies.

• Develop and implement a vision and strategy for Microsoft Security. • Identify new market opportunities and build relationships with clients. • Support the sales team by providing technical expertise and preparing proposals. • Execute projects, playing a hands-on role in their realization and implementation. • Collaborate with the overarching Solution Manager and other experts within the focus solutions.

• Design and manage network security controls including firewalls, IDS/IPS, VPNs, and network segmentation • Implement and evolve zero-trust security models with least-privilege access • Configure and maintain identity and access management solutions (MFA, SSO, PAM, RBAC) • Implement encryption standards for data at rest and in transit; manage keys and certificates • Deploy and manage security monitoring, logging, and alerting infrastructure • Analyze security events, investigate incidents, and lead response activities • Perform vulnerability assessments and coordinate remediation efforts • Develop and maintain security policies, procedures, and documentation • Collaborate with teams to integrate security into CI/CD pipelines and infrastructure

• Support the Onit security function during US Central Time business hours. • Implement and manage cloud-native security tools and third-party solutions for threat detection and incident response. • Define, maintain, and execute the Incident Response plan, investigating and resolving incident escalations. • Perform regular risk assessments and vulnerability scans of cloud infrastructure, ensuring timely remediation. • Collaborate with Dev, DevOps, and Infra teams to remediate identified vulnerabilities, discuss security best practices, and assist with security incident response. • Analyze EDR alerts and logs to identify potential security incidents, taking appropriate action. • Continuously evaluate and implement security tools and practices to enhance the security posture of the Onit environment. • Assist with application security reviews and threat modeling. • Assist with security awareness programs for employees regarding security best practices