Selected to lead the organization in response to large-scale or urgentsecurity incidents.Roles and Responsibilities:Aide in analyzing incident data.Determine the impact of an incident.Act appropriately to limit the damage and restore services.Continually train on current technologies and threats.Maintain organization-specific knowledge.Develop incident handling exercises to ensure team readiness.Attend and participate in SIRT meetings and exercises.Collecting and labeling evidence while establishing a Chain of Custody.Conduct penetration tests and lead Red Team exercises as needed.Maintain confidentiality within the team and the Director of Information Security unless otherwise authorized.

• Oversight into automation of security tasks as well as documentation • Architect and implement security controls within the Software Development Lifecycle (SDLC) • Maintain Software Bill of Materials (SBOM). • Ownership, moderation, and continued configuration of our Web Application Firewall (WAF) that is in place for all externally facing domains and endpoints Integration and use of multiple Dynamic Application Security Testing (DAST) tools. • Vulnerability management for internal and external systems • Secure and monitor all in-house APIs for exploitation. • Inspect and assess current solutions on Application Security risks. • Identify security flaws in application code and web configurations, suggest and oversee remediation. • Collaborate to create effective SIEM rules and other tools' alerts to notify staff of application and web threats and correlate across environments. • Lead the vulnerability practice of scanning code across technology stacks and languages. • Validate risks and vulnerabilities while rating criticality and urgency. • Conduct penetration tests on code and web environments after every significant modification. • Ensure security controls are in compliance with applicable laws, regulations and policies to minimize risk and audit findings, specifically for PCI DSS. • Train others in IT on application security concepts and educate developers on risk based coding including the OWASP best practices. • Identify areas where IT processes need to be established or improved. • Participate in on-call rotation across the Information Security group, including incident response events. • Develop and implement security testing plans for software applications • Analyze security threats and vulnerabilities and provide recommendations for improvement