Security Operations Officer Starlink WLL

Security Configuration Assessment (IT & OT) • Perform detailed configuration assessments of IT and OT environments against CIS Benchmarks, NIST guidelines, and internal standards. • Review firewall rulesets ensuring least privilege, network segmentation, and policy compliance. Assess network devices (routers, switches, load balancers, SSE/SASE gateways) for secure configurations. • Validate OS hardening, patch compliance, and configuration baselines. • Evaluate Network Access Control (NAC) configurations for effective coverage and policy enforcement. • Recommend configuration hardening measures to reduce attack surface and improve resilience. • Review SASE/SSE deployments to ensure secure access, data protection, and consistent policy enforcement.
Technical Risk Identification • Identify and assess technical security risks across IT, OT, and cloud assets. • Conduct or coordinate penetration testing of cloud workloads, web applications, APIs, and internal infrastructure. • Perform container and Kubernetes security assessments (GKE, AKS). • Map findings from vulnerability scans, pen tests, and configuration reviews to operational and business impacts. • Conduct red team and adversary simulation exercises to validate detection and response capabilities. • Contribute to risk documentation, validation, and reporting for management visibility. Vulnerability Remediation Management • Track, monitor, and manage vulnerabilities across IT and OT environments. • Prioritize vulnerabilities based on risk, exploitability, and business impact. • Coordinate with infrastructure, application, and OT teams to ensure timely remediation and validation of fixes. • Maintain dashboards and executive summaries showing vulnerability trends and remediation metrics.
Security Assurance • Develop and manage security assurance programs across IT, OT, and cloud domains. • Track and report Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to measure program effectiveness. • Conduct periodic control and compliance reviews to validate adherence to baselines and risk mitigation plans. • Identify and document gaps or deviations and drive remediation through collaboration with responsible teams.