It Security Specialist

Job Title: IT Security Professional
Location: Chennai / Mumbai
Experience: 5+ Years

Work Mode: Hybrid

Key Responsibilities

• Perform Security & Compliance scans across Internet-facing and internal infrastructure.
• Conduct vulnerability assessments and analyze security findings and risks.
• Follow up with application, infrastructure and technology teams on vulnerability remediation.
• Onboard new assets into security scanning and compliance processes.
• Investigate security findings and identify opportunities to improve security reporting and processes.
• Evaluate, design, develop, deploy, test and transition security solutions, tools and processes.
• Provide technical support for security tools, processes and solutions.
• Prepare and maintain technical documentation related to security engineering and architecture.
• Work closely with IT Architects, Infrastructure, Network, Application and Security teams to implement appropriate security controls.
• Create, maintain and ensure adherence to security policies, procedures, technical baselines, guidelines and control standards.
• Support security projects throughout their lifecycle.
• Assess security controls across multiple security domains and ensure they work effectively together.
• Present security risks, vulnerabilities and remediation requirements to technical and non-technical stakeholders.
• Contribute to security initiatives and continuously improve security processes and controls.

Mandatory Technical Skills

• 5+ years of overall IT experience with 4+ years in IT/Cyber Security.

• Strong knowledge of Network Security and Security Infrastructure Management.

• Hands-on experience with Vulnerability Assessment / Vulnerability Management.

• Experience with enterprise security technologies such as:

• Firewall

• Endpoint Security

• Server Security

• RHCE (Red Hat) OR MCSA (Windows Server) Mandatory.

• Experience with NDR Vectra (IDS/IPS) implementation and operational management.

• Good understanding of security technologies, infrastructure and cybersecurity concepts.

• Scripting knowledge.

• Experience in developing/maintaining security tools, procedures and technical documentation.

• Familiarity with APAC Cyber Security and Technology Risk Management regulatory requirements is an advantage.

• Security certifications such as CISSP, CISM, CEH or equivalent are an advantage.