• Conduct detailed network traffic analysis to identify risks and vulnerabilities • Assess current network security posture and recommend improvements • Design and support implementation of network security controls • Provide independent assessment of security capabilities and gaps • Support development of bespoke solutions based on organisational exposure • Work across network architecture to ensure secure design principles • Contribute to improving detection and response capabilities (e.g. deception techniques)

• Serve as the technical authority for the Saviynt IGA platform. • Provide deep product expertise and architectural leadership across design, implementation, and operational phases. • Partner closely with the System Owner, security leadership, cloud teams, and implementation partners. • Ensure scalable, secure, and high-quality delivery of identity services. • Act as the primary technical decision-maker for Saviynt configurations, integrations, and troubleshooting. • Provide leadership to implementation and configuration teams.

• Lead deployment and optimisation of Microsoft Defender for Endpoint • Support security architecture across M365 E5 security stack • Align endpoint security strategy across laptops, servers, and VDI environments • Has in-depth knowledge/ skill of deploying designing M365 e5 security stack • Provide guidance on licensing utilisation and maximisation of E5 capabilities • Support integration across multiple security domains and tools • Work with engineering teams to implement and improve security controls

• Design, develop, and implement a comprehensive authorization framework for cloud resources, addressing user roles, resource-specific restrictions, task-based access, and granular engineering access • Lead the technical implementation of Just-In-Time (JIT) access control systems for production environments (systems, secrets, data) to minimize standing privileges for engineering and platform teams. • Collaborate with engineering to integrate data classification (e.g., safe-harbor annotations) with access control mechanisms, ensuring that data sensitivity directly informs access decisions. • Develop and maintain security automation scripts, tools, and services in Python or Go to streamline security operations, vulnerability management, compliance checks, and incident response. • Write clean, maintainable, and testable code (primarily Python and Go; familiarity with Ruby is a plus) for security automation, building custom security integrations, and developing security-focused tools. • Implement and champion Infrastructure as Code (IaC) principles, **specifically using Terraform,** for programmatic definition, enforcement, and auditing of security configurations. • Contribute to the design and implementation of centralized security controls, such as an engineering-owned Web Application Firewall (WAF), to manage rate limiting, IP blocking, input validation, and request filtering. • Partner with engineering teams to establish and implement secure practices for managing the development toolchain (code generation utilities, linters, browser extensions, CLI tools, IDE plugins) to mitigate supply chain risks. • Design and help implement a secure, "blessed" mechanism for webhook testing in local development environments, blocking unauthorized tunneling tools. • Define, implement, and enforce container security hardening standards (e.g., least privilege, no unnecessary utilities, limited internet access) in collaboration with engineering teams. • Drive the remediation of legacy cloud environments, particularly in GCP, by inventorying, assessing, and improving security controls. • Design and implement solutions for granular data access control in cloud environments, particularly addressing compliance requirements for handling sensitive data. • Collaborate closely with infrastructure software, engineering, DevOps, and product teams to co-design and integrate robust, automated security controls into systems, architectures, and CI/CD pipelines. • Act as a subject matter expert on cloud security (AWS, GCP), providing guidance, code reviews (Python, Go), and technical expertise on secure cloud adoption, secure software development, and access control best practices. • Support organizational change management efforts related to new security controls and practices by providing technical rationale and assisting in the development of new workflows. • Conduct security assessments, threat modeling, and contribute to incident response, developing automation for prevention and faster response. • Develop and maintain comprehensive documentation for security architectures, controls, automation scripts, and incident response playbooks.