It Security Manager

Chola; Chennai; On-site; INR 600,000 - 1,800,000; Full time

Job summary

Chola is seeking an Information Security professional in Chennai to strengthen the Information Security Program. The role focuses on analyzing security components, configuring security modules, and integrating critical assets into the SIEM.

You will assess alerts, develop SIEM use cases, and anticipate incidents to reduce risk. Key duties include incident triage, forensics, vulnerability coordination, and adhering to security frameworks such as NIST.

Responsibilities

• Analyze components of the Information Security Program to identify weaknesses and develop opportunities for improvement
• Ensure various security solutions (IPS, Firewall, WAF, AV, EDR, DLP etc.) are intact and modules are effectively configured
• Integrate critical assets/applications in the SIEM tool
• Assess SIEM alerts, create custom SIEM use cases, anticipate security alerts, incidents and disasters and reduce their likelihood
• Knowledge in electronic investigation and forensic processes and methodologies including experience with reviewing raw log files for analysis and data correlation
• Knowledge in cloud security controls (AWS, Azure, Google)
• Prepare security incident correlation policies
• Review security alerts and take appropriate action as per defined policies
• Conduct incident triage and investigation
• Coordinate with stakeholders to run vulnerability scans and review vulnerability assessment reports
• Familiarity with security frameworks (e.g. NIST Cybersecurity framework) and risk management methodologies
• Review access rules enabled in various networks, security products for compliance with POA
• Test SIEM use cases and identify security gaps
• Experience implementing security solutions that resolve security and business risk trade-offs
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring

Job description

• Analyze components of the Information Security Program to identify weaknesses and develop opportunities for improvement
• Ensuring various security solution (IPS, Firewall, WAF, AV, EDR, DLP etc.) are intact and the modules are effectively configured.
• Integrating critical assets/application in SIEM tool
• Assess SIEM alerts, create custom SIEM use case, anticipate security alerts, incidents and disasters and reduce their likelihood
• Knowledge in electronic investigation and forensic processes and methodologies including experience with reviewing raw log files for analysis and data correlation
• Knowledge in cloud security controls (AWS, Azure, Google)
• Preparing security incident correlation polices
• Reviewing security alerts and take appropriate action as per defined policies
• Conduct incident triage and investigation
• Coordinate with respective stake holders to run vulnerability scans and reviews vulnerability assessment reports.
• Familiarity with security frameworks (e.g. NIST Cybersecurity framework) and risk management methodologies
• Reviewing access rules enabled in various network, security products are as per POA
• Testing SIEM use cases and identifying security gaps
• Experience implementing security solutions that resolve security and business risk trade-offs
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring