• Lead real-time monitoring, triage, and analysis of complex security events, providing verifiable assessments of threats and incident severity. • Engineer and automate advanced detection use cases across DigitalOcean's cloud and corporate environments, leveraging deep knowledge of adversary TTPs to design and implement scalable alerting solutions. • Develop, track, and report on key metrics for security monitoring effectiveness and incident response performance, using data to drive improvements. • Own and evolve the security monitoring program strategy, ensuring alignment with evolving threat landscapes and business priorities. • Work closely with Infrastructure Security Engineers to identify log sources, integrate, and maintain data pipelines (e.g., log sources, forwarders, parsing, enrichment). • Perform proactive threat hunting and hypothesis-driven investigations and investigate anomalous activity to uncover hidden or emerging threats within DigitalOcean’s environments. • Mentor and guide lower level analysts, reviewing escalated incidents and providing technical leadership during incident response. • Coordinate threat analysis using historical data and architecture diagrams to identify attack vectors. • Collaborate with multiple teams to close monitoring gaps and improve overall security. • Optimize security tools and processes to reduce false positives, improve detection fidelity, and automate response workflows where appropriate. • Lead the creation and maintenance of detailed playbooks, runbooks, and documentation to standardize detection and response efforts.

End Point Security Analyst (remote) Job Type Full-time Description A.T. Still University (ATSU) is seeking a full-time exempt Endpoint Security Analyst. This is a fully remote position. This position will plan, implement, upgrade, or monitor security measures for the protection of computer networks and information, specializing in endpoint security, vulnerability management, and application security. In addition, ensure that appropriate security controls are in place and safeguard digital files and vital electronic infrastructure. May respond to computer security incidents and malware. Duties & Responsibilities: - Windows endpoint administration: Windows patches, 3rd Party Patches, Firewall, Vulnerability management - Manage Active Directory / Group Policy infrastructure - Mobile device management: Encryption, Multi-Factor authentication - Provide computer security consulting support for the university - Monitor security logs on all systems and address any incidents or anomalies recorded - Document computer security and emergency measures, policies, procedures, and testing protocols - Assure end-point protection software is kept current in accordance with departmental policy - Analysis of applications/software/polices in enterprise environment and the effects of workflows to the end-user - Ability to use powershell to automate security processes, parse security logs, and secure the environment - Confer with users to discuss issues such as computer data access needs, security violations, and programming changes - Coordinate implementation of computer system plan with establishment personnel and outside vendors - Monitor use of data files and regulate access to safeguard information in computer files - Desktop architecture - Microsoft Server and Active Directory administration - Group policy management - Building and deploying secure golden OS images Requirements - 4 year Degree Computer Science or a related degree plus ability to acquire CCNA Security 3-5 years experience in: - Ivanti, Computer hardware, Microsoft Windows Server, TCP/IP, Google e-mail systems, ethernet, fastethernet and Cisco equipment, Nessus, ISE, and endpoint protection - Network and computer forensic analysis, data security, electronic threat identification and mitigation - PCI/DSS, HIPAA, FERPA, copyright laws - Management of monitoring software/service, ie. Orion - Management of asset/inventory/patching software/service, ie. Ivanti and Ordr - Management of password management software/service, ie. Secret Server The salary for this position is $70,000 to $87,523 based on experience and location. ATSU offers a comprehensive benefits package including medical, dental, and vision coverages, among more. If eligible, employee-elected benefits would begin the first of the month following hire date. For more information, please visit: atsu.edu/employment/benefits. A.T. Still University (ATSU) does not discriminate on the basis of race, color, religion, ethnicity, national origin, sex (including pregnancy), sexual orientation, age, disability, or veteran status in admission or access to, or treatment or employment in its programs and activities.

• Manage the full lifecycle of vulnerabilities in operating systems, applications, and other assets • Identify, analyze, and prioritize vulnerabilities using industry-recognized methodologies • Assess the impact, severity, and risk of vulnerabilities, converting this information into clear indicators to support decision-making • Route vulnerabilities to the responsible teams and monitor remediation plans and deadlines • Provide technical support to teams during the vulnerability remediation process • Monitor metrics, track SLAs, and escalate to leadership when necessary • Support the continuous improvement of Vulnerability Management processes and the organization’s security posture

• Lead cyber operations planning and cybersecurity evaluation • Conduct cybersecurity testing using automated vulnerability scanning tools • Analyze system configurations and remediate findings • Develop and maintain cybersecurity frameworks across various systems • Provide comprehensive system administration support across multiple platforms • Design, deploy, and maintain cybersecurity tools and technologies • Collaborate with engineering and cybersecurity teams to ensure effective system performance • Provide technical guidance and troubleshooting support to customers and stakeholders