IT Security Engineer

Tekskills Inc.; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tekskills Inc. is seeking a Senior Security Tooling Specialist to own application security tooling strategies and lead vulnerability management initiatives.

You will drive integration and configuration of patch assurance tooling and an end-to-end vulnerability lifecycle platform across Linux and Windows environments. You will partner with platform engineering and CIO streams to define controls, document mitigations for legacy platforms, and hand over to BAU teams.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 8+ years in security tooling with vulnerability management and remediation.
• Solid understanding of cyber security challenges and change management.

Responsibilities

• Understand Application Security service and tooling needs and gather technical requirements.
• Manage implementation and configuration of patch assurance tooling.
• Manage implementation and configuration of end-to-end vulnerability lifecycle management tool.
• Lead end-to-end integration of security software tools, including design, configuration and testing.
• Provide authoritative guidance on test planning and execution.

Skills

Security tooling

Vulnerability management

Patch assurance

Linux/Windows hardening

DevSecOps

Tanium

Education

Bachelors in CS/IT

Tools

Tanium

Patch tooling

Vulnerability tooling

Job description

RESPONSIBILITIES:

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.
• Provides authoritative advice and guidance on any aspect of test planning and execution.
• Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.
• Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

• Security Technology Service domain heads
• Application Security Scanning & Remediation Teams
• Technology Services Infrastructure Engineering and Operations
• Development team leads for various CIO streams

COMPETENCIES (KNOWLEDGE & SKILLS):

• Bachelors Degree in Computer Science, Information Technology or related field
• 8+ years of Security Tooling experience in the context of vulnerability management, patch assurance and vulnerability remediation
• Good understanding of cyber security and the challenges around implementing change in this space
• A highly analytical, process oriented, collaborative and creative individual
• An individual that is willing to take ownership for driving change and challenge existing concepts
• Hands on experience with system hardeing for Linux and Windows Platforms via the implementation of controls.
• Detailed working knowledge of various Application Security products covering static and dynamic testing models
• Experience in the configuration and implementation of security management tooling products eg: Tanium.
• Experience in cloud security products and a good understanding of DevSecOps principles

Experience in managing large scale deployments of Application Security products