InfoSec Admin

You will be responsible for managing EDR, Vulnerability Management, Deep Discovery Administration, Deep Security Administration, Network IDS, Firewall Optimization & Review, Web Application Firewall, Privilege Access Management, and Deception Monitoring as an InfoSec Admin in Mumbai (Powai / Mahape) on a Contract to Hire basis with a Hybrid work mode. Your primary tasks will include: - EDR Management: Overseeing the lifecycle of EDR management for servers in the Corporate IT Datacenter, including installation, uninstallation, troubleshooting, and compliance. Investigating and remediating identified incidents post-noise exclusion, monthly reporting to Corporate IT regarding EDR health and issues, and handling USB access requests. - Vulnerability Management: Conducting VA scans using designated tools, providing reports upon request, handling remediation of findings by application owners, performing quarterly VA scans on critical DC infrastructure, importing scan results into the GRC tool, managing false positives, ensuring VA scans for new servers and network devices, and maintaining the VA tool. - Deep Discovery Administration: Monitoring malicious events daily, identifying infected machines, uploading logs to Trend Micro Portal, monitoring malicious SMTP traffic, and ensuring traffic is blocked at the Anti-Spam Gateway. - Deep Security Administration: Installing the agent on Critical servers, running Recommendation scans for IPS engine, applying rules, and verifying applications for any issues due to Deep Security rules. - Network IDS: Monitoring the network for critical incidents, performing noise reduction for false positives, taking corrective actions for identified incidents, and optimizing Firewalls. - Web Application Firewall: Onboarding and offboarding applications on Cloud WAF, creating and enforcing policies, and coordinating with vendors as needed. - Privilege Access Management: Allocating and deallocating users to PAM tools, mapping servers within PAM for access, reviewing alerts and overall PAM usage, reporting exceptions and statistics to CIT, and coordinating with vendors. - Deception Monitoring: Monitoring exceptions and alerts, remediating significant incidents, and coordinating with vendors when needed.,