- Map the Azure and AKS environment, detection and logging coverage, and ISO 27001 and SOC 2 control scope.
- Handle infrastructure-related alerts end to end.
- Ship infrastructure hardening and automation improvements to production.
- Own infrastructure vulnerability management from triage through remediation follow-up.
- Run infrastructure vulnerability remediation on a predictable cycle and report against SLAs.
- Build and operate a honeypot that produces high-fidelity alerts.
- Expand SIEM connector coverage and document log sources and retention.
- Manage detection content as code with reviewed and tested rules and documented runbooks.
- Automate audit evidence for the infrastructure scope.
- Eliminate long-lived credentials on critical paths and enable secure defaults.
PythonKubernetesAzure+3 more