Infrastructure Security Specialist

We are seeking a proficient Infrastructure Security Specialist with expertise in server security, specifically in Linux/Unix/Solaris/AIX environments. The candidate will assist in the creation and implementation of Security Configuration Documents (SCD) and play an advisory role in developing and maintaining security policies and standards based on global best practices.

Information Security 70% (Mandatory)

INFORMATION SECURITY (CLOUD SECURITY) IS PRIME

Role & responsibilities

Advisory Role: Develop and maintain security policies and standards for server security, including OS security for Linux/Unix/Solaris/AIX, based on CIS benchmarks, OEM hardening guidelines, and NVD standards. Security Expertise: Provide overall security expertise and advise on the secure deployment of servers. Proactive Analysis: Conduct proactive analysis of platform technologies to ensure secure deployments and configurations in line with global security best practices. Security by Design: Assist the platform engineering team with security inputs during the design of architecture to ensure security by design. Standards Development: Develop platform security standards and guide solution design to meet corporate security requirements. Incident Management: Assist in corrective and preventive actions in case of security incidents, and provide guidance for preventive measures based on the threat landscape. Monitoring Mechanisms: Strategize and formulate high and low-level monitoring mechanisms for security posture and advise measures to improve them. Infrastructure Security Strategy: Manage the organizations infrastructure security strategy and controls, staying abreast of new technologies and capabilities. Technical Knowledge: Maintain in-depth technical and business knowledge of all aspects of server security, networking, encryption technologies, directory services, and authentication services. Vulnerability Management: Enhance the security posture of the Bank's IT infrastructure by addressing vulnerabilities published by OEMs and security agencies such as CERT. Metrics Tracking: Produce and track metrics for the effectiveness and maturity of server security technologies and processes.

Preferred candidate profile

experience in the following areas: Platform technologies, specifically non-Windows server administration.

Hands-on experience with Linux/Unix/Solaris/AIX.

Providing security recommendations for the deployment and management of servers.

Inter-technology and inter-OEM integration from a security perspective.

Broad knowledge and experience in networking, authentication mechanisms, cryptographic controls, etc.