Information Security Specialist

Role: L3-Information Security

1. Job Description:

• Primary Responsibility would be to manage the organizational practices for the following:
• Vulnerability Assessment
• Infrastructure(Cloud/Traditional DC) Penetration Testing
• Configuration Review
• Red Teaming
• Should be able to lead the team for delivery of Vulnerability Management operations.
• Conduct penetration testing as per the calendar activities and on demand request for Infrastructure Vulnerability Assessment.
• Conduct Vulnerability Assessment and Penetration Testing on Cloud Environment (AWS, GCP, Azure).
• Conduct configuration review as per the calendar activities and on demand request for server, database, network components.
• Identify and propose work – around for critical vulnerabilities.
• Explain vulnerabilities to System owners and provide recommendations for mitigation
• Monitor progress of vulnerability mitigations and maintain track of remediation
• Provide advisory support to internal IT team for closure of identified vulnerability during the security testing
• Coordinate fixing of identified and accepted vulnerabilities with Airtel Payments Bank and Security Vendors.
• Stay abreast of newer trends in tools and technologies used for application security
• Develop POCs to demonstrate security issues

1. Qualification:
2. B.Tech, B.E, MCA or equivalent from a Recognized university
3. At least 8 years of experience in similar role
4. Certifications Preferred: OSCP, EC-council LPT.
5. Hands on experience with popular security tools – Nessus, Metasploit, KALI Linux.
6. Working knowledge of CIS Security benchmarks
7. Has practical experience in auditing various OS , DB , Network and Security technologies