Job Overview
- Design, implement, and maintain security architecture for on-premises environments.
- Monitor, detect, triage, and respond to security incidents and alerts end-to-end, providing L2 and L3 support; own the incident lifecycle from initial detection through containment, eradication, recovery, and post-incident review.
- Operate and tune Microsoft Sentinel (SIEM/SOAR) — build detection rules, analytic queries, and automated playbooks to reduce mean time to detect and respond.
- Leverage Varonis for data access governance, insider threat detection, and abnormal behaviour alerting across file systems and cloud storage.
- Design, plan, and execute internal Red Team engagements — including scoping, rules of engagement, adversary simulation, and structured debrief — to validate defensive controls and identify gaps before real attackers do. Improve and maintain the Red Team Infrastructure aligned with the current threat landscape
- Operate AI/LLM-powered penetration testing tooling against Vitol's own infrastructure as part of the Red Team program, evaluating its effectiveness and contributing findings to the wider security roadmap.
- Conduct offensive security assessments using industry-standard tools including Burp Suite (web application testing), BloodHound (Active Directory attack path mapping), C2 frameworks.
- Manage incidents reported by CrowdStrike Falcon (endpoint telemetry and threat intelligence), Microsoft Defender (endpoint protection and XDR).
- Perform threat hunting across endpoint, network, and cloud telemetry; develop and refine threat hunt hypotheses based on current threat intelligence.
- Implement and manage identity and access management solutions, with particular attention to privileged access and lateral movement vectors identified through Red Team activity.
- Develop and maintain security documentation including Red Team playbooks, IR runbooks, and lessons-learned reports.
Ready to Apply?
Take the next step in your career journey
Stand out with a professional resume tailored for this role
