application control, host firewalls, auditing, and encryption Drive vulnerability management and patching strategy, ensuring consistent remediation across enterprise endpoints and servers Build automation in PowerShell and related frameworks to streamline detection, response, and compliance workflows Integrate and optimise endpoint protection and EDR solutions, ensuring effective coverage and minimal user … least-privilege enforcement Hands-on experience with Active Directory, Entra ID, and PKI environments, including certificate lifecycle management Strong automation and scripting ability using PowerShell, with the capability to build repeatable, efficient security workflows Understanding of threat tactics and countermeasures relevant to Windows environments, including lateral movement and persistence ...