Cyber Security Engineer

Overview:

TekWissen is a global workforce management provider that offers strategic talent solutions to our clients throughout India and world-wide. The below client  is the global software quality assurance and testing services company, specializing in software testing, quality management, and DevOps solutions, including functional, performance, and security testing for various software applications

Job Title: Cyber Security Engineer

Job Type: Full Time

Work Type: Onsite

Notice: Immediate

Details of the project:

• We are creating a new pool of resources .
• This pool will have Privacy & Security Representatives (PSR).
• There are PSR for each product in client side.
• The role of the PSR is like face of the product w.r.t. cybersecurity.
• They will create threat models, cybersecurity documentations, coordinate with development teams of the product to get the security issues fixed which are identified during VA / PT.
• We want to start this immediately with one PSR and keep scaling up based on feedback received from stakeholders.

Role Summary/Purpose:

• We are looking for a Product Security Representative to be part of our exciting journey to develop, build a scaling platform for medical applications used by radiologists, cardiologists and surgeons to improve the review and analysis of medical images.
• You need to drive security activities, check and follow vulnerabilities, ensure security control at new feature design, increase security awareness and help to identify and reduce possible product security gaps.

Essential Responsibilities:

• Ensuring and driving product related security activities
• Increase product security awareness within the development team
• Analyzing, tracking and following product related threat, vulnerabilities, security gaps and desired solution
• Maintain cyber security processes, monitoring systems/tools
• Support the development teams by security analyses and threat modelling
• Interact with worldwide engineering and product teams (US, Hungary, India) Qualifications/Requirements:
• Experience analyzing/detecting and remediating cybersecurity issues
• Experience in security/network/system administration/development or equivalent knowledge
• In-depth knowledge of various operating systems (Linux, Windows)
• Practical hand-on experience in a complex system development
• Product security knowledge and mindset (STIG, vulnerabilities, CVE tracking, security gap analysis)
• Has the ability to analyze and evaluate impact of changes, defects and different technology choices
• Good English skills Desired Characteristics:
• Demonstrates clarity of thinking to work through limited information and vague problem definitions
• Influences through others; builds direct and "behind the scenes" support for changes
• Proactively identifies, facilitates and drives project obstacles or barriers on behalf of the team

PSR Detailed Requirements are as follows:

• Good understanding of cloud services & secure design system (AWS or GCP)
• Create Threat Model using STRIDE methodology (MS threat model tool)
• Mitigate the Risks identified in the threat model
• Good understanding of NIST 800-53,FIPS, GDPR & HIPAA
• Initiate SAST DAST container scanning & perform risk assessment (Eliminate false positive & rescoring the CVSS score)(Vulnerability Management)
• Container security knowledge is essential
• VSBOM creation using tool & finalize the direct/transitive dependencies
• PKI, MTLS, symmetric encryption, asymmetric encryption, understanding of data at rest, motion & use
• OWASP TOP 10, Rest API, oauth & microservices.

Experience:

• 5 to 7 Years

TekWissen Group is an equal opportunity employer supporting workforce diversity.