Application Security Engineer

Optimum Solutions; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

BNP Paribas India Solutions seeks an IT Security Professional to join the Security Scans team in INDIA. You will handle security & compliance scans for Internet-facing assets, intranet applications and servers, including containers, firewalls, proxies across Asia-Pacific, onboarding new assets and improving reporting.

Strong communication skills and experience across IT security domains are essential. The role offers opportunities to expand knowledge across related topics managed by the security

Qualifications

• RHCE (RedHat) or MCSA (Windows server) certification Must
• ISC2 or ISACA certifications any
• Security Tools – Vectra, Varonis, Guardium, DLP and EDR – Implementation and Operational Management.
• Hands on enterprise security tools (Firewall, Endpoint security, Server security) - Any one of the domains is must.

Responsibilities

• Evaluate, specify, design, develop, deploy, test and transition security solution(s), processes, and tools
• Manage the associated projects to support this lifecycle
• Deliver the technical documentation related to the engineering and architecture of the security solution(s)
• Provide expert support for the processes and tools in scope of security solution(s)
• Work closely with IT architects and other IT teams on designing security capabilities in the IT solutions (services, process, and tools)
• Create, maintain, and ensure adherence security policies, procedures, technical baselines, guidelines and control standards
• Leverage multiple security focus areas to ensure that protective measures are appropriate, effective in combination, and interact properly with other system capabilities

Skills

Security Infra Management

Network Security

Vulnerability Assessment

Scripting Knowledge

Education

Bachelor's degree in Computer Science

Tools

Tanium

Symantec DLP

Varonis

Guardium

Job description

Job Title:

IT Security Professional

Department:

ISPL IT Production

About Business line/Function:

Production Security

Position Purpose:

The team in INDIA is currently looking for an IT Security Professional, within the Security Scans teams.

The new joiner will work on Security & Compliance scans for Internet facing assets, Intranet application, Intranet servers and all infrastructures including container, Firewall, Proxy etc. assets across Asia-Pacific.

The new joiner will not only perform day-to-day scan and follow-up of the remediation, but also onboard new assets and investigate improving the reporting.

Excellent communication & presentation skills will be needed, to help any party involved understand the risk.

Given the diversity of activities, the new team members will have the opportunity over time to expand their knowledge & responsibilities on the other topics managed by the teams.

Responsibilities

Direct Responsibilities

• Evaluate, specify, design, develop, deploy, test and transition security solution(s), processes, and tools
• Manage the associated projects to support this lifecycle
• Deliver the technical documentation related to the engineering and architecture of the security solution(s)
• Provide expert support for the processes and tools in scope of security solution(s)
• Work closely with IT architects and other IT teams on designing security capabilities in the IT solutions (services, process, and tools)
• Create, maintain, and ensure adherence security policies, procedures, technical baselines, guidelines and control standards
• Leverage multiple security focus areas to ensure that protective measures are appropriate, effective in combination, and interact properly with other system capabilities

Technical & Behavioral Competencies

• Requires a minimum of 7 years' professional experience in the technology field, including a minimum of 4+ years of security experience.
• University degree, preferably in Computer Science with spec. in IT Security
• Experience assisting the development and maintenance of security tools (Tanium, Symantec DLP, Varonis, Guardium), procedure, and documentation
• Thorough understanding of technologies and security concepts
• Ability to present complex solutions and methods to general community
• Security certifications are a plus
• Familiar or good understanding of APAC regulatory requirements in Cyber Security and Technology Risk Management
• Communication skills: excellent communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner
• Collaboration: team player and transversal contributions across IT areas
• Analytical skills: interpretation of complex situations and elaboration of adapted solutions in a proactive way
• Rigor & Accuracy: focus of robust deliverables for long term achievements
• Flexibility: capacity to adapt in a fast-paced changing environment

Qualifications:

• RHCE (RedHat) or MCSA (Windows server) certification Must
• ISC2 or ISACA certifications any
• Security Tools – Vectra, Varonis, Guardium, DLP and EDR – Implementation and Operational Management.
• Hands on enterprise security tools (Firewall, Endpoint security, Server security) - Any one of the domains is must.

Skills Referential (Required knowledge, skills and abilities)

Technical Skills:

• Security Infra Management
• Network Security
• Vulnerability Assessment
• Scripting Knowledge

Behavioral Skills:

• Ability to manage / facilitate a meeting, seminar, committee, training
• Business communication
• Stakeholder handling
• Ability to understand, explain and support change

Education Level:

Bachelor’s degree or equivalent

Location:

Chennai / Mumbai

About BNP Paribas Group:

BNP Paribas is the European Union’s leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group’s commercial & personal banking and several specialized businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability.

About BNP Paribas India Solutions:

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union’s leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.

Commitment to Diversity and Inclusion

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work.

We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, color, national origin, age, religion, social status, mental or physical disabilities, veteran status etc.

As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.