IT Security Engineer

Tekskills Inc.; Delhi; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Tekskills Inc. is seeking an experienced security tooling specialist to own vulnerability management, patch assurance, and remediation across complex environments. You will lead integrations of security software, define testing designs, and guide stakeholders.

The role requires hands-on experience with Linux/Windows hardening and cloud security, with an emphasis on DevSecOps practices. You will collaborate with Security Technology Service heads, platform engineering, and CIO streams to implement

Qualifications

• Bachelor's degree in CS/IT or related field.
• 8+ years' security tooling experience in vulnerability management, patching, and remediation.
• Strong understanding of cyber security and change management challenges.
• Analytical, process-oriented, collaborative, and proactive.
• Willingness to drive change and challenge existing concepts.
• Hands-on Linux/Windows hardening via controls.

Responsibilities

• Understand Application Security service needs and gather technical requirements.
• Manage implementation and configuration of patch assurance tooling.
• Manage end-to-end vulnerability lifecycle management tooling implementation and configuration.
• Lead end-to-end integration of security software tools including design, configuration and testing.
• Provide authoritative guidance on test planning and execution.
• Collaborate with platform engineering to determine controls for legacy Windows platforms and schedule implementations.
• Document mitigating controls for legacy platforms and facilitate training for BAU teams.
• Experience in deploying large-scale Application Security products.

Skills

Security tooling

Vulnerability management

Patch assurance

Vulnerability remediation

System hardening

Linux hardening

Windows hardening

AppSec products

Tanium

DevSecOps

Cloud security

Change management

Analytical thinking

Ownership

Stakeholder management

Education

Bachelor's Degree in Computer Science/IT

Tools

Tanium

Job description

RESPONSIBILITIES:

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.
• Provides authoritative advice and guidance on any aspect of test planning and execution.
• Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.
• Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

• Security Technology Service domain heads
• Application Security Scanning & Remediation Teams
• Technology Services Infrastructure Engineering and Operations
• Development team leads for various CIO streams

COMPETENCIES (KNOWLEDGE & SKILLS):

• Bachelors Degree in Computer Science, Information Technology or related field
• 8+ years of Security Tooling experience in the context of vulnerability management, patch assurance and vulnerability remediation
• Good understanding of cyber security and the challenges around implementing change in this space
• A highly analytical, process oriented, collaborative and creative individual
• An individual that is willing to take ownership for driving change and challenge existing concepts
• Hands on experience with system hardeing for Linux and Windows Platforms via the implementation of controls.
• Detailed working knowledge of various Application Security products covering static and dynamic testing models
• Experience in the configuration and implementation of security management tooling products eg: Tanium.
• Experience in cloud security products and a good understanding of DevSecOps principles

Experience in managing large scale deployments of Application Security products