Production Security Officer

Direct Responsibilities

• Performs basic vulnerability scans using vendor utility tools.
• Monitors security audit and intrusion detection system logs for system and network anomalies.
• Investigates and/or escalates security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security. Documents and reports event(s).
• Assists in providing engineering analysis, design and support for firewalls, routers, networks, and operating systems.
• Assists in performing product evaluations and recommends products/services for network security. Validates and tests basic security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.
• Assists in the review and recommends the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.
• Assists in providing oversight and enforcement of security directives, orders, standards, plans and procedures at server sites.
• Responsible in Contributing to Internal InfoSec Assessments
• Responsible in Independently contribute to 3rd Party Supplier Vendor Risks
• Responsible in contributing to audit remediations & ensure compliance by effective risk mitigation plans.
• Liaison & driving external audits like ISO27001, SOC1, SOC2 & Client Audits.
• Executes vulnerability analysis and exploitation of applications, operating systems and networks.
• Identifies intrusion or incident path or method through testing and evaluation procedures.
• Contributes to the design, development and implementation of countermeasures, systems integration, and tools specific to cyber and information operations.
• Resolve complex malware and intrusion issues within the system as they occur.
• Monitors industry security updates, technologies, and practices on a continual basis to improve overall security management.
• Serves as an internal information security consultant on the standards, complex issues and best practices for the organization.
• Performs testing and analysis of complex software systems to determine both the functionality and intent of the systems.
• Builds and maintains operational and configuration documentation and creates and maintains diagrams. Works with Cybersecurity Risk and Security Operation teams to enhance the overall security posture of the enterprise.

Contributing Responsibilities

• Work along with the team to ensure there is no impact to the performance.
• Also ensure 100% uptime for assets.

Technical & Behavioural Competencies

• Knowledge on all security domains SIEM, TVM, IAM, Network Security, SOC and GRC
• Understanding of Networking & Systems
• Able to communicate across various business lines.
• Excellent oral, written and presentation communication skills.

Specific Qualifications (if required)

• ITIL V3 Certified
• Should have basic knowledge of Security tools: Endpoint detection Response (EDR) , SIEM , Network monitoring tools, Email security tools etc
• Basic knowledge of programming like python, JavaScript, etc is desired.
• Experience with working in a high paced pro-active environment.
• Public Cloud skills

Job Location