• Act as liaison with our Managed Security Service Provider (MSSP), reviewing Tier 1/2 alert summaries, validating findings with organizational context, and facilitating escalations for hands-on resolution • Conduct real-time troubleshooting, log analysis, endpoint forensics, and containment actions on internal systems using tools like MS Defender, Wiz, and Tenable • Participate in incident response activities, ensuring timely communication with stakeholders and proper documentation of security events • Support our endpoint security solutions, including EDR solutions across the enterprise • Monitor endpoint compliance, investigate agent health issues, and coordinate remediation with IT teams • Perform regular health checks, updates, and optimization of security agents to ensure maximum coverage and performance across all organizational assets • Generate compliance reports, executive briefings, and threat intelligence summaries for leadership and cross-functional teams (IT, Legal, Governance, Program Security)

• Continuously monitoring the alert queue for multiple clients, from small business to large organizations using multiple tools, such as IDS, SIEM and SOAR. • Conducting initial triage and investigation of alerts to identify potential true positives, false positives, policy violations, and compromises. • Escalating problematic alerts for client review and validation via email or phone. • Performing basic threat hunting activities against customer networks. • Assist with writing customer facing reports: Threat report, Advisories or Vulnerabilities. • Interfacing with customers to remediate security issues. • Meeting timely Service Level Agreements (SLAs) for the full alert and case life cycle.

• Deliverable 1: Mock-up of COMS NR/NS environment on the NATO Software Factory • Deliverable 2: Identification and documentation of the COMS requirements • Deliverable 3: Creation of a video demonstrating the identified requirements in D2 • Deliverable 4: Demonstration of the COMS mock-up environment

• Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers. • Define processes, systems, and applications to make attacks difficult to execute and easy to detect. • Embed security practices and tools within the development pipeline. • Develop and maintain incident response plans and playbooks. • Perform regular vulnerability assessments and penetration testing. • Lead or participate in incident response activities, including investigation, containment, eradication, and recovery. • Monitor security alerts and incidents to identify and respond to threats promptly. • Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance. • Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence.