Information Security Analyst

Overview

Evaluates, tests, maintains and monitors information security policies, procedures and systems, including hardware, firmware and software, and helps identify, investigate and resolve security risks and incidents.

What you'll do

• Monitor complex systems and respond to known and emerging threats against the Global Payments network via intrusion detection software, under moderate supervision.
• Conduct detailed, comprehensive investigation of security issues by reviewing security log data and triaging a wide variety of security events.
• Perform incident handling, including implementation of containment, protection and remediation activities, under supervision.
• Enhance knowledge of new and emerging threats by analyzing third-party software/solutions, IT configuration changes (including access control requests), and network/system architecture from a risk perspective.
• Design and configure security systems, including proxy, remote access, mail gateway, intrusion prevention, wireless networking, data leak prevention, security information and event management and web application firewalls, under supervision.
• Assess and disseminate threats related to the enterprise regarding current vulnerability by managing and developing an emerging threat model.
• Assess risks based on changes to implementation of ISO/BSO, and enhance knowledge of PCI/Logical Security guidelines and models, HIPAA, PII, and card personalization.
• Participate in creating cost-effective solutions for system/application development regarding Information Security processes and concepts.
• Perform day-to-day Information Security functions pertaining to numerous security software products and processes, under close supervision.
• Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents.
• Develop techniques and procedures for IS security risk assessments, compliance audits, and evaluation and testing of hardware, firmware and software for possible impact on system security.

What you'll need

• Bachelor's degree in Computer Science, Info Security, or related field, or relevant work experience in a related field.
• Typically minimum 2 years of relevant experience, including network operations or engineering or system administration on Unix, Linux, MAC, or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, penetration testing, web application assessment, and secure coding practices.
• Skills: developing professional expertise and applying company policies and procedures to resolve a variety of issues.
• Ability to identify, communicate, and mitigate risk within technical solution designs.
• Continued self-education on new and emerging threats and relevant processes, controls, or technologies to mitigate them.
• Knowledge and skills to contribute to all phases of Incident Response.

Nice to have

• Professional certifications: CISSP, CISM, CISA, GSEC, Network+, Security+.
• Typically minimum 4 years of relevant experience with knowledge of industry standard security compliance programs such as PCI, SOX, GLBA, etc.

Details

• Location: Pune, India.