• supporting the monitoring and management of the Firm’s security infrastructure, including email security, firewall infrastructure, vulnerability detection and remediation, monitoring, log collection/correlation, and intrusion detection/prevention. • Monitor and respond to security events including potential policy violations, malicious activity and insider threats. • Analyze and escalate incidents appropriately, ensuring timely resolution and documentation. • Maintain and improve detection systems, including IDS, firewalls, endpoint protection, and phishing detection. • Conduct comprehensive vulnerability scanning, detection, and remediation across the firm’s infrastructure, ensuring effective management and resolution of vulnerabilities. • Ensure adherence to regulatory frameworks (NIST, HIPAA, FISMA, etc.) and internal policies. • Support and manage client audit requests, produce evidence, and respond to audit requirements. • Track and periodically validate application and data authorizations. • Develop and maintain technical and non-technical metrics to substantiate the firm’s information security program. • Use statistical methods and tools to model normal and abnormal system behavior. • Suggest improvements to detection criteria and security controls. • Participate in projects to implement, upgrade, or modify security systems and processes, completing special projects and other duties as assigned by the Information Security Manager.