Job Description

Job Title: Information Security Engineer
Department: Information Security

Experience-1+yrs

Location-Cochin

Role Overview

The InfoSec Security Engineer serves as cyber security expert for Inspired. A key element of the Security Engineers role is working with corporate and product technical teams to ensure that systems are not unnecessarily exposed to internal and external threats. This position is responsible for implementing, maintaining and monitoring technical controls employed to satisfy regulatory and legal requirements to ensure that information assets are adequately protected.

Specific Responsibilities and Experience

Main Responsibilities
\xef\x82\xb7 Design, implement and maintain security solutions, adhering to a "defence in depth" security strategy.
\xef\x82\xb7 Perform Investigations of security alerts and incidents using security tool set to detect and identify any potential
security breaches or compromises, flagging false positives and containing and eradicating any breaches that
occur.
\xef\x82\xb7 Ensure that incidents are correctly reported and documented in accordance with governing policies and
procedures.
\xef\x82\xb7 Monitoring security infrastructure, identifying and reporting real time attacks and vulnerabilities on the Inspired
estate.
\xef\x82\xb7 Using vulnerability management suite to identify security weaknesses and vulnerabilities, implement remediation
plans and alert teams/business owner responsible for systems.
\xef\x82\xb7 Monitoring Identity access management, including monitoring for abuse of permissions by authorised system
users.
\xef\x82\xb7 Carry out regular security permissions and privilege audits.
\xef\x82\xb7 Provide a Technical Escalation Point during security incidents, establishing the extent of an attack, the business
impacts, and advising on how best to contain the incident along with advice on systems hardening and mitigation
measures to prevent a reoccurrence.
\xef\x82\xb7 Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate
repeatable tasks.
\xef\x82\xb7 IDS/IPS and WAF policies/rules administration and maintenance.
\xef\x82\xb7 Maintain a keen understanding of evolving threats and vulnerabilities to ensure the security of the enterprise.

Required Skills and Experience

\xef\x82\xb7 Strong experience and knowledge of using Security Information and Event Management tools such as Splunk,
Rapid7 IDR, SolarWinds, Qradar and implementing and supporting Network Access Controls such as Forescout
and Next Gen Firewalls such as Cisco, Palo Alto, Checkpoint, SonicWALL.
\xef\x82\xb7 Solid understanding of network and security monitoring architecture.
\xef\x82\xb7 Experience with vulnerability management tools such as Nexpose and Nessus.
\xef\x82\xb7 Proven experience in driving a proactive information security culture.
\xef\x82\xb7 Strong understanding of the cyber threat landscape.
\xef\x82\xb7 Experience conducting analysis/investigation and containment of potential data breaches or cyber security
incidents.
\xef\x82\xb7 Familiarity with security vulnerabilities, exploits, malware and digital forensics.
\xef\x82\xb7 Knowledge of and high understanding of Linux and Windows operating systems.
\xef\x82\xb7 Good understanding of Office365 & Cloud networking technologies.
\xef\x82\xb7 Knowledge of internally managed PEN testing tools.
Beneficial Experience
\xef\x82\xb7 Familiarity with ISO/IEC 27000 and other standards such as ISO 9001, 27036 & 31000
\xef\x82\xb7 The Sarbanes\xe2\x80\x93Oxley Act of 2002
\xef\x82\xb7 Certified CISM, CISMP, CISA or CISSP

TalentBasket