Senior Information Security Engineer

Responsibilities:

1. Work closely with the IT and project teams in getting a thorough understanding on the requirement on both network and cloud front, review from the security standpoint and recommend relevant solutions.

2. Responsible for effective coordination and prompt & proactive communication with the relevant teams involved in the requirements.

3. Disbursal of minutes of meetings (MoM) of various meetings with IT/Project teams and track action items to closure.

4. Constantly update immediate manager on progress or issues with respect to any of the requirements.

5. Contribute to the group in identifying the redundant requirements and put forward the thoughts to automate the same.

6. Evaluate outsourced/third-party technologies and hosting environments to ensure they provide adequate protection for the processing, transmission, and storage of company/clients information. 7. Responsible to provide guidance to new joiners as well as subordinates in the team.

7. Keep self-acquainted with the activities of other requirements within Architecture function so as to fill in the place in others absence and also to nurture the learning skills for professional growth.

Skills and knowledge expectations:

1. Network security:

 Knowledge on Networks: LAN, WAN, SDN, NFV, Network Capacity Planning, BGP, Routing, Proxy Servers, Network Infrastructure Services (DNS, DHCP, CA, Directory Services), Load Balancing, VPN technologies and SSL certificates.

 Analyze and recommend solutions for client based networking security measures.

 Evaluating firewall rule base, identifying vulnerable rules or ports and providing security recommendation as per organization practices.

2. Cloud Security

 Knowledge of various cloud environments, cloud security stack and cloud deployment models.

 Able to evaluate delivery of security offerings related to cloud security and recommend appropriate controls based on the offering.

 Working experience on Amazon Web Services, Azure and other cloud service provider.

 Understanding of security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring, data protection (encryption, tokenization).

3. Knowledge on Information Security Management System (ISMS) process.

4. Skillful in core area of security such as OS security, OS and DB hardening, Active Directory, IDS, IPS, Firewalls, Routers, etc.

5. Knowledge of tiered application architectures, web applications, APIs and mobile application security.

6. Should have the perspective to understand the business criticality and ability to identify & highlight risk/ gaps.

Certifications:

• Cyber Security certifications will be an added advantage.
• Certifications such as SANS, OWASP, CCSK (Cloud Security Alliance), CISSP or any other standard institutes or certification bodies.
• Network Certifications such as CCNA/CCNP.