InfoSec Admin

As an InfoSec Admin in Mumbai (Powai / Mahape) on a Contract to Hire basis with a Hybrid work mode, your role will involve managing various security tools and processes to ensure the security of the organization. Your primary responsibilities will include: - EDR Management: - Overseeing the lifecycle of EDR management for servers in the Corporate IT Datacenter. - Handling installation, uninstallation, troubleshooting, and compliance of EDR. - Investigating and remediating identified incidents post-noise exclusion. - Providing monthly reports to Corporate IT regarding EDR health and issues. - Handling USB access requests. - Vulnerability Management: - Conducting VA scans using designated tools. - Providing reports upon request and handling remediation of findings by application owners. - Performing quarterly VA scans on critical DC infrastructure. - Importing scan results into the GRC tool and managing false positives. - Ensuring VA scans for new servers and network devices and maintaining the VA tool. - Deep Discovery Administration: - Monitoring malicious events daily and identifying infected machines. - Uploading logs to Trend Micro Portal and monitoring malicious SMTP traffic. - Ensuring traffic is blocked at the Anti-Spam Gateway. - Deep Security Administration: - Installing the agent on Critical servers and running Recommendation scans for IPS engine. - Applying rules and verifying applications for any issues due to Deep Security rules. - Network IDS: - Monitoring the network for critical incidents and performing noise reduction for false positives. - Taking corrective actions for identified incidents and optimizing Firewalls. - Web Application Firewall: - Onboarding and offboarding applications on Cloud WAF. - Creating and enforcing policies and coordinating with vendors as needed. - Privilege Access Management: - Allocating and deallocating users to PAM tools and mapping servers within PAM for access. - Reviewing alerts and overall PAM usage and reporting exceptions and statistics to CIT. - Coordinating with vendors for effective management. - Deception Monitoring: - Monitoring exceptions and alerts and remediating significant incidents. - Coordinating with vendors when needed to ensure effective deception monitoring.,