The Identity and Access Management (IAM) Administrator is responsible for maintaining Froedtert & MCW’s Identity and Access Management environment. This role provides technical expertise in supporting access management tools, administering identity lifecycle processes across multiple operating systems and platforms, and developing and enforcing IAM security policies and procedures. Manage and resolve access-related incidents, requests, and changes through the ServiceNow ticketing system. Ensure timely, accurate, and well-documented fulfillment in accordance with established service levels and compliance requirements. Work closely with technical teams and business partners to ensure secure, efficient access to systems and data. Protect the organization’s information assets. Engage with stakeholders at all levels of the organization. Effectively manage workload, priorities, and assigned ticket queues. Perform other duties as assigned.

• Conduct comprehensive analysis across OSINT and Deep & Dark Web (DDW) sources. • Conduct proactive, covert engagement with threat actors across diverse underground environments. • Proactively monitor and collect high-signal data from illicit marketplaces and forums. • Utilize Flashpoint's industry-leading proprietary platform and external OSINT tools to synthesize complex data. • Drive intelligence outcomes by synthesizing raw data to assess credibility and deduce client relevance. • Create finished intelligence reports and products and peer review the finished intelligence products of others. • Drive community engagement by presenting at community calls and proactively proposing new content.

• Establish and lead the threat hunting program (10%) • Formulate hunting hypotheses based on priority threats (15%) • Conduct proactive and ad hoc hunting exercises (25%) • Validate and escalate relevant uncovered threats (10%) • Automate and orchestrate the hunting process (30%) • Document the process and train the team (5%) • Design and implement reporting metrics (5%)

• Monitor and analyze security events to identify potential threats and vulnerabilities within the organization's infrastructure. • Utilize advanced threat intelligence sources, security tools, and techniques to detect and investigate security incidents, assess the impact, and recommend appropriate mitigation strategies. • Collaborate with cross-functional teams to develop and implement proactive measures to enhance the organization's security posture and minimize risk exposure. • Develop and execute strategic plans for proactive threat-hunting initiatives to identify and mitigate potential security threats before they escalate. • Conduct in-depth analysis of security logs, network traffic, and endpoint data to identify anomalous behavior and indicators of compromise (IOCs). • Investigate and triage security alerts to determine the severity, impact, and root cause of security incidents. • Develop, test and validate detection engineering automation in order to combat threats, emergent risks and vulnerabilities to enhance SOC detections and response times.