Specialist I - Information Security

5 - 7 Years
1 Opening
Bangalore

Role Proficiency:

With strong knowledge of various applicable compliance standards independently handle internal/external compliance audits and VAPT/Red Teaming assignments. Involve more in the risk assessment and remediations. Effectively communicate with customer to understand the requirements and clearly convey the requirements to team. Handle the assigned tasks with minimal supervision

Outcomes:

Measures of Outcomes:

Outputs Expected:

Documentation:

Process:

Monitoring:

Training or certifications:

Skill Examples:

Knowledge Examples:

• Should have a strong understanding of concepts of Information Security Business Continuity and Data Privacy VAPT Red Teaming and various compliance standards.
  • Knowledge on ISO and other Compliance standards efficient to evaluate the security controls.

  • Knowledge on ISO 22301/27001/9001/27701 Risk Management incident management awareness activities customer assurance etc.

  • Knowledge on standard SDLC and project management life cycles.

  • Knowledge on the operations of various functional units like HR REFM IT Finance etc. and units involved in IT Asset lifecycle management.

  • Expert on security testing standards like OWASP Top 10 SANS 25 etc.

  • Good at OWASP cheat sheets and other security frameworks.

  • Expert on Linux commands.

  • Expert on Scripting Languages like Shell Script Python etc.

  • Development and Testing knowledge would an added advantage.

  • Hands on experience in RSA Archer Postman Burp Suite Nessus Nmap Genymotion MobSF Drozer etc.

  • Good to have Certifications like ISO 27001/22301/9001/27701 Lead Auditor/Implementor CISA CRISC SSCP ECSA (Practical) ECES CHFI OSEE etc.
  
  
  Additional Comments:

  Mandatory Skills:Windows OS, server Skill to Evaluate: Windows OS,Mac Os Developer, server Experience:6 to 8 Years Location:Bengaluru Job Description: Minimum experience of 6 years in engineering & operations of security & compliance of Windows Server OS and Mac OS environment Hands-on experience in analysing, testing and implementing security-related configurations such as OS security policies in Windows servers and Mac devices For Mac devices, hands-on experience in applying compliance policies on individual machines OR via Microsoft Intune's configuration profiles to enforce security settings Hands-on experience in analyzing OS security compliance data for both on-prem and cloud environments Knowledge in Center for Internet Security (CIS) Benchmarks Understanding of common IT issues Understanding of Waterfall and Agile processes and principles Good stakeholder management skills to communicate and support remediation of security issues Good communication and presentation skills Education Qualificaiton:Bachelor Degree Job Title: C&S Infrastructure Security Engineer – Windows server OS and Mac OS Roles & Responsibilities: Understand the existing Sony’s secure configuration / hardening standards for Windows server OS and Mac OS Understand the existing security controls Implement and maintain hardening standards for Windows and macOS systems. Apply industry-standard benchmarks (e.g., CIS Benchmarks, NIST 800-53, DISA STIGs) to secure operating systems. Configure system settings, including user accounts, file permissions, services, and network configurations, to minimize attack surfaces Develop automation scripts (e.g., PowerShell for Windows, or Shell scripting for macOS) to streamline hardening tasks. Work with IT administrators and DevOps teams to integrate hardening practices into system deployment workflows. Conduct training sessions on secure configuration practices and hardening standards. Stay updated on emerging threats and vulnerabilities affecting Windows and macOS platforms.Research and evaluate new security controls that are applicable to Windows server OS and Mac OS environments Execute proof of concept for new controls (if required) Build proper documentation for new technologies & remediation steps Engages with other IT teams and stakeholders to ensure a consistent approach for security implementation and provide organizational support across the enterprise Collaborate with team-mates and understand the threats, vulnerabilities and risks to the enterprise Establish and manage non-production and production environments for testing Own the end-to-end technical design, unit testing, and the maintenance of the hosting environment Participate in daily stand-up meetings and project meetings to contribute to achieve project deliverables within required timeframe Project Details: The person in this role is the primary infrastructure security engineer, maintains a strong people network with the stakeholders, is conversant with key assets & their operations and is instrumental in the analysis, research and testing of infrastructure security tools/functions globally.

Windows,Mac OS,Developer,Server, Powershell / Shellscript