30272-Cybersecurity, Risk Management

Job Title: 30272-Cybersecurity, Risk Management
Position: Specialist System Engineer Experience: 2.1-5 years Category: Infrastructure /Cloud Location: Mumbai Position ID: J1026-1465 Employment Type: Full-time Job Summary – We are looking for a Vulnerability Management & Security Hardening Engineer with 2-4 years of cybersecurity experience to strengthen the organization's security posture through system hardening, vulnerability assessment, compliance monitoring, and remediation activities. The role focuses on implementing CIS Benchmarks, conducting security assessments across network and server infrastructure, automating security controls, and supporting audit and regulatory compliance initiatives. Responsibilities Direct Responsibilities 1. Deep familiarity with the CIS Controls and CIS Benchmarks for routers, switches, firewalls, IDS/IPS, load balancers, VPN concentrators, etc. 2. Ability to map benchmark recommendations to device‑specific configuration commands. 3. Experience producing hardening guides and remediation plans 4. Linux (RHEL, CentOS, Ubuntu) and Windows Server hardening per CIS Benchmarks. 5. Understanding of SELinux/AppArmor, sysctl, group policies, secure baselines. 6. Hands‑on use of MicroFocus Automation, Qualys, Rapid7 InsightVM for benchmark compliance checks. 7. Ability to ingest scan results, prioritize findings and produce remediation tickets. 8. Python (paramiko/Netmiko/NAPALM), PowerShell, Bash for bulk configuration review and remediation. 9. Experience with Ansible, Chef, or Puppet for applying hardening templates. Contributing Responsibilities 1. Contribute to the Permanent Control framework for implementation of policies and procedures in day to day business activities, such as Control Plan 2. Contribute to Internal Audit response activities. 3. Comply with regulatory requirements and internal guidelines. 4. Contribute to improvement of tools used by Production Security to follow up on the Security Incidents Technical & Behavioral Competencies . OWASP methodologies application is mandatory. . 2 – 4 year experience in IT Security minimum . University degree, preferably in Computer Science with spec. in IT Security . Exceptional communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner. . Curious and highly implicated in IT Security . Team player . Experience working in an international and complex financial environment, dealing with both business constraints and IT users across countries. . Experience in a multi cultural environment is appreciated. . CEH or Any Security certifications are appreciated. . Experience in Development languages and scripting is appreciated. Specific Qualifications: Skills Referential (Required knowledge, skills and abilities) Technical Skills: . Vulnerability Management . Network Security . Vulnerability Assessment . Scripting Knowledge Behavioral Skills: . Ability to manage / facilitate a meeting, seminar, committee, training . Business communication . Stakeholder handling . Ability to understand, explain and support change Education Level: Bachelor's degree or equivalent Location: Mumbai #LI-SA2

Your future duties and responsibilities

Required qualifications to be successful in this role

Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. Come join our team—one of the largest IT and business consulting services firms in the world.