Sr. Remediation Engineer

Company Description

TELUS Digital crafts unique and lasting experiences for customers and employees through cutting-edge digital transformations. Our global team is dedicated to elevating customer journeys and solving business challenges with innovative technology. We offer a comprehensive portfolio of digital IT services, including cloud solutions, AI-powered automation, and digital design and consulting services. Powered by our proprietary GenAI engine, Fuel iX™, we advance enterprises' GenAI projects quickly and responsibly. Guided by our Humanity-in-the-loop principles, we are committed to creating inclusive, thriving communities worldwide.

Role Description

This is a full-time hybrid role for a Sr. Remediation Engineer, located in Noida. The Sr. Remediation Engineer will be responsible for identifying vulnerabilities and implementing remediation strategies, conducting risk assessments, and collaborating with other teams. Tasks will also include preparing reports, ensuring compliance with security policies, and staying updated with the latest security trends and technologies. Some work from home is acceptable as part of this hybrid setup.

Some of this security analyst responsibilities include:

·        Clearly defining and developing new policies, processes, training documents, and best practices.

·        Collaborating with technical teams to improve observability.

·        Reviewing risk findings, assigning them to fix teams, and reporting remediation efforts and related challenges.

·        Gathering key information for exception requests, including risk details, action plans, and remediation dependencies.

·        Partnering with security teams to improve data quality in security tools and external reports.

·        Hosting meetings with members of application, security, and leadership teams to communicate updates and changes to security postures.

·        Validating submitted evidence meets requirements to resolve risks and compliance issues.

·        Educating application teams on security subject matter.

To be successful, this person will must possess a strong understanding of the wide array of AppSec and InfoSec tools, protocols, and best practices applicable to application platforms, including their infrastructure. This person must have experience maintaining team documentation, leading meetings, escalating issues, and driving teams to deliver work.

The ideal person will have a minimum of 8 years of experience in software engineering, cybersecurity, and/or cyber-audit, and will clearly express the following characteristics and competencies:

·        Strong verbal communication skills. Must be comfortable speaking in front of audiences including technical teams and senior leaders, including VPs.

·        Strong written communication skills with the ability to produce quality literature and technical documentation.

·        The ability to collaborate with technical teams to define, improve, and document procedures to meet compliance requirements.

·        Diligence in tracking and following up on action items and inquiries across multiple efforts and teams.

·        Strong knowledge in security standards and practices for both on-premises and AWS environments; CCSP, CISSP, or other cloud-focused application security certifications are a big plus.

·        Familiarity with Data Center and AWS infrastructure, including data center network architectures, virtualization, containerization, and AWS products/offerings.

·        Ability to perform analysis and tests to validate findings and remediation claims.

·        A strong knowledge of ITIL operations and agile development practices. Experience working in a DevSecOps culture is a plus. The ability to quickly navigate matrixed environments is a must.

·        Experience in a software engineering, delivery manager, or a project manager role is strongly desired.