IT Security Engineer

Tekskills Inc.; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tekskills Inc. in Hyderabad, India, is seeking a seasoned Security Tooling Lead to own patch assurance tooling and the end-to-end vulnerability lifecycle. You will drive integration of security tools, shape test planning, and collaborate with platform engineering on legacy Windows controls.

You will partner with Security Technology Service domain heads and engineering teams to deploy App Sec tooling at scale, including Tanium, while guiding change management and BAU handover.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 8+ years of security tooling experience in vulnerability management, patch assurance and remediation.
• Strong understanding of cyber security and challenges around implementing change.
• Analytical, process oriented, collaborative and creative.
• Willing to take ownership for driving change and challenging concepts.
• Hands-on Linux/Windows hardening via implementation of controls.
• Working knowledge of App Security products covering SAST and DAST.
• Experience configuring and implementing security management tooling (e.g., Tanium).
• Experience in cloud security and DevSecOps principles.
• Experience managing large-scale deployments of App Security products.

Responsibilities

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including design, configuration and testing.
• Provide authoritative advice and guidance on test planning and execution.
• Engage with platform engineering teams to determine technical controls for obsolete Windows 2003 Server and Windows XP and plan prioritized implementation.
• Document mitigating controls for obsolete platforms and facilitate training for BAU teams.

Skills

Security tooling

Vulnerability management

Patch assurance

Vulnerability remediation

Change management

Linux hardening

Windows hardening

Application security

Static testing

Dynamic testing

DevSecOps

Cloud security

Tanium

Education

Bachelor's Degree in Computer Science, Information Technology or related field

Tools

Tanium

Job description

RESPONSIBILITIES:

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.
• Provides authoritative advice and guidance on any aspect of test planning and execution.
• Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.
• Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

• Security Technology Service domain heads
• Application Security Scanning & Remediation Teams
• Technology Services Infrastructure Engineering and Operations
• Development team leads for various CIO streams

COMPETENCIES (KNOWLEDGE & SKILLS):

• Bachelors Degree in Computer Science, Information Technology or related field
• 8+ years of Security Tooling experience in the context of vulnerability management, patch assurance and vulnerability remediation
• Good understanding of cyber security and the challenges around implementing change in this space
• A highly analytical, process oriented, collaborative and creative individual
• An individual that is willing to take ownership for driving change and challenge existing concepts
• Hands on experience with system hardeing for Linux and Windows Platforms via the implementation of controls.
• Detailed working knowledge of various Application Security products covering static and dynamic testing models
• Experience in the configuration and implementation of security management tooling products eg: Tanium.
• Experience in cloud security products and a good understanding of DevSecOps principles

Experience in managing large scale deployments of Application Security products