Cyber Security Engineer

BDx Group; Mumbai; Sur place; INR 3 500 000 - 6 500 000; Plein temps

Résumé du poste

BDx Group in Mumbai seeks a Senior Security Leader to join the 24x7 SOC, overseeing incident response, vulnerability management, and security operations across cloud and on-prem infrastructure. You will work with global security teams to enhance threat detection and mitigation using SIEM, EDR, and SOAR tools.

Requires 5+ years in cybersecurity, familiarity with ISO 27001, NIST, PCI-DSS, and relevant certifications. A Bachelor's degree in CS or InfoSec is required; CISSP/CISM desirable.

Qualifications

• Bachelor’s degree in computer science, information security, or related field.
• 5+ years of experience in cybersecurity, SOC operations, or IT security.
• Strong knowledge of cloud security (AWS, Azure, GCP) and on-prem security.
• Experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies.
• Hands-on experience in penetration testing and vulnerability management.
• Familiarity with security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, etc.).
• Certifications such as CISSP, CISM, CEH, OSCP, or Security+ are a plus.

Responsabilités

• Security Operations & Incident Response within a 24x7 SOC.
• Monitor, investigate, and mitigate security threats using SIEM, EDR, IDS/IPS, and SOAR.
• Develop and maintain incident response playbooks and security procedures.
• Perform forensic analysis and root cause investigations for breaches.
• Conduct regular vulnerability assessments and security audits.
• Prioritize and implement security patches for OS, networks, and apps.

Connaissances

Security operations

Incident response

Threat intelligence

Vulnerability management

Cloud security

EDR/IDS/IPS

SIEM

Forensic analysis

Formation

Bachelor’s degree

Outils

Firewalls

IDS/IPS

SIEM

EDR

Encryption

Description du poste

Position Reporting to : AVP IT infrastructure

COMPANY OVERVIEW

Big Data Exchange (BDx), A leading Pan Asian hybrid, hyperscale and edge solutions provider with assets located in Hong Kong, Singapore, Guangzhou, Nanjing and expanding footprints in SEA regions.

Our hybrid ecosystem provides colocation, Enterprise Services, private cloud services, disaster recovery services , and interconnect solutions across cloud service providers, telcos, internet exchanges and major data centers.

We power digital transformations and sustainability as part of our core values to provide mission

critical infrastructure for Enterprise IT work loads. To find out more, please visit www.BDxworld.com

ROLE SUMMARY

The Security

lead will provide security incident response and readiness as part of a 24x7 Security Operations Centre within and in support of the IT Infrastructure and Operations team. Support global vulnerability management processes including OS and infrastructure patching, hardening and testing efforts. Operate security related tools (HIDS, NIDS, IPS, Analysers, Scanners, etc.) to identify active threats, attacks, vulnerabilities, exposures, etc., and prioritize for activity within the team. Assist in speedy identification of mitigation/remediation solutions

DUTIES AND RESPONSIBILITIES

• Security Operations & Incident Response
• Monitor and respond to security incidents within a 24x7 Security Operations Center (SOC).
• Investigate, analyze, and mitigate security threats using SIEM, EDR, IDS/IPS, and SOAR solutions.
• Develop and maintain incident response playbooks and security procedures.
• Perform forensic analysis and root cause investigation for security breaches.
• Vulnerability & Risk Management
• Conduct regular Vulnerability Assessments (VAPT) and security audits.
• Prioritize and implement security patches for OS, networks, and applications.
• Support hardening efforts for IT systems and infrastructure.
• Security Tools & Compliance
• Manage and maintain security tools such as WAF, SIEM, DLP, IAM, and endpoint protection.
• Ensure compliance with security frameworks like ISO 27001, PCI-DSS, and NIST.
• Assist in security awareness training and best practices.
• Support internal & external audits by providing necessary security documentation.
• Threat Intelligence & Continuous Improvement
• Identify emerging threats and attack vectors impacting enterprise security.
• Recommend and implement mitigation strategies to enhance cybersecurity posture.
• Collaborate with global security teams to align on security best practices.

QUALIFICATION & EXPERIENCE

Bachelor’s degree in Computer Science, Information Security, or related field. 5+ years of experience in cybersecurity, SOC operations, or IT Security. Strong knowledge of cloud security (AWS, Azure, GCP) and on-prem security. Experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies. Hands-on experience in penetration testing and vulnerability management. Familiarity with security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, etc.). Certifications such as CISSP, CISM, CEH, OSCP, or Security+ are a plus. Analytical mindset with strong problem-solving skills. Ability to work under high-pressure situations and respond to incidents in real time. Excellent communication skills to report security risks and incidents effectively. Proactive approach to identifying and mitigating security threats.

COMPETENCY AND BEHAVIORAL SKILLS (Use "E" to denote Essential and "D" for Desirable)

• E- Bachelor’s degree in computer science, information systems, cyber security or a related field.
• E- At least 5 years of relevant experience in cyber security
• E- Knowledge of information technology operation (e.g. cloud, data, system, application and infrastructure, etc.)
• E- Knowledge of cyber security assessment (e.g. security audit, vulnerability assessment, penetration testing, etc.)
• E- Knowledge of cyber security product (e.g. End-Point Solution (EDR), WAF, DLP, SIEM, SOAR)
• E- Knowledge of market best practice and framework (e.g. ITIL, ISO, PCI-DSS, NIST, etc.)
• E- Certification in cyber security is an advantage (e.g. CISSP, CISM, CISA, ISO Lead Auditor, CEH, etc.)
• D- Certification in project management and framework is an advantage (e.g. PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.)