Senior Information Security Engineer

Overview

Senior Information Security Engineer role within First American (India) that monitors computer networks for security issues, investigates breaches and cyber security incidents, installs and operates security measures, and performs vulnerability testing and remediation.

What you'll do

• Monitor computer networks for security issues and investigate security breaches and other cyber security incidents.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Work with the security team to perform tests and uncover network vulnerabilities.
• Fix detected vulnerabilities to maintain a high-security standard.
• Document security breaches and assess the damage they cause.
• Follow ITIL practices regarding incident, problem and change management and use domain knowledge to improve/enhance the work output of the ISO team.
• Provide guidance and support to technical teams on security standards and industry best practice.
• Perform security operations and maintenance using security tools.
• Manage and assist in performing ongoing security monitoring of information systems, including assessing information security risk through qualitative risk analysis on a regular basis.
• Assess the impact of emerging threats and manage teams to coordinate appropriate remedial actions.
• Evaluate and recommend new information security technologies and countermeasures against threats to information or privacy.
• Design and implement dashboards and data visualizations for various stakeholders and escalate problems to the respective authority when needed.
• Ensure that disaster recovery and emergency operating procedures are in place and tested on a regular basis.
• Conduct risk analysis to identify critical operations and systems that are core to continued business operations in the event of a disruption.
• Apply professional judgment in complex situations and handle multiple tasks, initiatives and priorities effectively.
• Develop and maintain network and data security capabilities used by the Information Security Operation (ISO) team.
• Drive the development and ongoing tuning and optimization of security event monitoring and analysis application platforms.
• Assist in establishing and supporting enterprise policies, processes, and standard service level agreement levels.

What you'll need

• Graduate / Post Graduate in Computer Science / Information Technology, with a minimum of 15 years of formal education.
• Professional work experience of 4 to 9 years.
• Understanding of basic network services, vulnerabilities and attacks.
• Good knowledge of cryptography, application security, access control, malware, exploits and vulnerabilities.
• Knowledge of internet security, networking protocols, and related technologies, including IDS/IPS, firewalls such as Cisco, PaloAlto, etc, content filtering, and packet inspection.
• Knowledge of cloud technology and concepts.
• Basic knowledge of any scripting languages or automation.
• Knowledge of OS concepts: Windows, Linux and Unix server platforms.
• Experience with security management tools and applications: Sourcefire (Intrusion Prevention System), Symantec (AV), Qualys and WebInspect (vulnerability assessment), ArcSight (SIEM), Vectra (threat detection), ServiceNow (ticketing/change management), FireMon, Microsoft Infrastructure applications.
• Familiarity with other tools: AV and malware analysis tools, open-source scanning tools, reporting tools, threat intelligence feeds, others.

Details

• Location: Bangalore, Karnataka, India.