Specialist - Cyber Security Incident Response

Overview

Oversee and manage the security posture of the organization's entire cloud environment across all regions globally, including vulnerability detection, threat response and security incident response for cloud systems.

What you'll do

• Develop and implement a comprehensive cloud security strategy aligned with industry standards and the organization's risk tolerance.
• Proactively assess and harden cloud infrastructure configurations to minimize attack surface and potential vulnerabilities.
• Enforce and maintain granular IAM policies across all cloud environments to ensure least privilege access.
• Perform continuous asset discovery to identify and track all cloud resources, including servers, databases, storage and network devices.
• Conduct regular, continuous and ad hoc vulnerability scanning to identify and prioritize security vulnerabilities and potential threats.
• Monitor for emerging threats and zero day vulnerabilities utilizing the threat detection and response program.
• Identify and remediate misconfigurations that can lead to security breaches.
• Ensure the security of containerized workloads by scanning images for vulnerabilities and enforcing best practices.
• Collaborate with and lead remediation teams on plans for identified vulnerabilities, leveraging vulnerability automation capabilities where applicable.
• Prioritize security patch management to ensure timely patching of cloud infrastructure and applications based on vendor recommendations.
• Generate regular reports on vulnerabilities, trends, remediation progress and cloud security posture.
• Enforce established security policies and procedures across all cloud environments.
• Maintain compliance with industry regulations (e.g., GDPR, NYDFS, Privacy) and internal security policies.
• Assist in incident response investigations and remediation of cloud security incidents, analyzing activities and logs to identify root causes.
• Assess and advance the configuration of the security cloud system's vulnerability tool, including policies, rules and alerts.
• Analyze data generated by the tool to identify trends, patterns and potential security issues.
• Maintain and support custom automation workflows within the tool to streamline remediation processes.
• Integrate the tool with broader security tools (SIEM, CMDB, SOAR, SOC, etc.).
• Actively monitor the tool's alerts and notifications, performing alert triage and prioritization by severity and impact.
• Create and manage remediation tasks to timely resolve identified vulnerabilities and misconfigurations.
• Maintain SLA adherence for alert response and remediation times.
• Conduct root cause analysis of vulnerability remediation failures and implement alternative solutions.
• Generate regular reporting and metrics on vulnerabilities and threats for alert trending and remediation effectiveness.

What you'll need

• In-depth knowledge of leading cloud platforms (AWS, Azure, GCP, etc.) and their security best practices.

Nice to have

• Assist with the evaluation and selection of vulnerability management tools that integrate with various cloud environments and provide fine-grained access controls and CMDB attributes such as asset ownership.
• Integrate security cloud tools with other security tools and systems, including SIEM solutions and change ticketing systems.
• Launch awareness campaigns to promote secure practices and vulnerability management, emphasizing the unique challenges of cloud environments.
• Collaborate with development, business CISOs, operations and cloud teams to ensure effective vulnerability management throughout the SDLC, cloud and production environments.

Details

• Location: Gurgaon.
• Work mode: Hybrid, with at least three days per week in the office.