Day-to-Day Responsibilities
Design and set up security controls such as firewalls, access management, encryption and secure cloud configurations
Monitor security alerts and logs, and investigate suspicious activity with the security operations team
Run vulnerability scans, prioritise weaknesses and coordinate patching with system and network teams
Harden servers, endpoints, networks and cloud environments against known attack methods
Review application code, system designs and new projects for security flaws before they go live
Respond to security incidents using a defined plan, contain the damage and document what happened
Write security policies and train staff on safe practices such as spotting phishing emails


