Oversee patch management cycles for Windows, Linux, network appliances, and hypervisors, ensuring timely compliance with DT security directives.
Manage vulnerability remediation workflows, POA&Ms, patch exception requests, and risk reporting to DT cybersecurity leadership.
Endpoint Protection, Monitoring & Threat Detection
Oversee endpoint security platforms including Cortex XDR, Tripwire (file integrity monitoring), and other EDR solutions, ensuring accurate detection and policy enforcement.
Integrate alerts, logs, and telemetry into enterprise SIEM platforms for correlation, analytics, and operational response.
Monitor and tune security controls to reduce false positives and improve visibility across DT data centers and cloud workloads.
Zero Trust (ZT), Access Control & Identity Governance
Implement and maintain Zero Trust-aligned security architecture across data center and hybrid cloud environments.
Oversee access control policies, privileged access workflows, multifactor authentication enforcement, least‑privilege reviews, and secure onboarding/offboarding procedures.
Ensure accurate and auditable access records across virtualization, storage, network, and cloud platforms.
ATO Lifecycle Management & Compliance
Lead ATO readiness and maintenance for DT platforms by managing documentation, security control inheritance, SSP updates, and audit evidence coordination.
Support NIST RMF activities including categorization, control implementation, control assessments, and continuous monitoring.
Maintain alignment with federal cybersecurity standards, STIGs, FedRAMP, and DT security policies.
Monitoring, Observability & Reporting
Oversee continuous monitoring dashboards, compliance scorecards, vulnerability trend reports, patch compliance metrics, and EDR effectiveness reporting.
Collaborate with SOC analysts and DT leadership to provide mission‑critical insights on threat posture, gaps, and recommended improvements.
Support integration and optimization of security telemetry from tools such as Tripwire, Cortex, SIEM platforms, and Archangel (vulnerability and cyber risk management).
