IT Security Engineer

Tekskills Inc.; Kolkata District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Tekskills Inc. is seeking an experienced Security Tooling Specialist to oversee vulnerability management tooling, patch assurance, and end-to-end lifecycle tooling. You will lead integration, define controls, and guide test planning while collaborating with Platform Engineering to address legacy Windows platforms.

The ideal candidate has 8+ years in security tooling, strong cyber security knowledge, and hands-on hardening for Linux/Windows, with DevSecOps expertise and an ownership mindset.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 8+ years of security tooling experience in vulnerability management and remediation.
• Strong understanding of cyber security and change management challenges.
• Analytical, process-oriented, collaborative and creative.
• Ownership mindset for driving change and challenging existing concepts.
• Hands-on system hardening for Linux and Windows with controls.
• Knowledge of application security products (SAST/DAST).
• Experience configuring security management tooling (e.g., Tanium).
• Cloud security and DevSecOps principles familiar.

Responsibilities

• Understand security service and tooling needs and gather technical requirements.
• Manage implementation and configuration of patch assurance tooling.
• Manage implementation and configuration of end-to-end vulnerability lifecycle tooling.
• Lead integration design, configuration and testing of security software tools.
• Provide authoritative guidance on test planning and execution.
• Collaborate with platform engineering to set controls for obsolete Windows platforms.
• Document mitigating controls and train BAU teams.

Skills

Security tooling experience

Vulnerability management

Change management

System hardening (Linux/Windows)

DevSecOps principles

Analytical mindset

Ownership mindset

Security tooling integration

Education

Bachelors Degree in CS/IT or related field

Tools

Tanium

Job description

RESPONSIBILITIES:

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.
• Provides authoritative advice and guidance on any aspect of test planning and execution.
• Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.
• Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

• Security Technology Service domain heads
• Application Security Scanning & Remediation Teams
• Technology Services Infrastructure Engineering and Operations
• Development team leads for various CIO streams

COMPETENCIES (KNOWLEDGE & SKILLS):

• Bachelors Degree in Computer Science, Information Technology or related field
• 8+ years of Security Tooling experience in the context of vulnerability management, patch assurance and vulnerability remediation
• Good understanding of cyber security and the challenges around implementing change in this space
• A highly analytical, process oriented, collaborative and creative individual
• An individual that is willing to take ownership for driving change and challenge existing concepts
• Hands on experience with system hardeing for Linux and Windows Platforms via the implementation of controls.
• Detailed working knowledge of various Application Security products covering static and dynamic testing models
• Experience in the configuration and implementation of security management tooling products eg: Tanium.
• Experience in cloud security products and a good understanding of DevSecOps principles

Experience in managing large scale deployments of Application Security products