Lead Security Analyst - CyberArk

Staples India; Chennai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Staples India is seeking a Lead Security Analyst to act as a technical SME for CyberArk Core PAS and EPM. The role involves onboarding privileged accounts and workstations, handling patches, and driving automation within IAM operations.

You will mentor analysts, manage L2/L3 tickets, and coordinate with engineering for new requirements. Shift-based roster support is required.

Qualifications

• 8-12 years of experience in CyberArk implementation and operations.
• 4-5 years of CyberArk CORE PAS implementation and support.
• 2-3 years of CyberArk EPM implementation and support.
• Bachelor's degree BE in Computer Science, Information Security, or related field.

Responsibilities

• Onboard and manage privileged accounts and platforms into CORE PAS for vaulting and session management.
• Onboard and manage endpoints into EPM for least-privilege enforcement and app controls.
• Analyze requirements for minor enhancements and implement/test deployments.
• Understand architecture/designs from engineering and transition to Operations.
• Handle CyberArk patch updates and upgrades; validate and test.
• Resolve L3/L2 tickets and triage production incidents within SLAs.
• Identify manual repetitive tasks and plan automation to reduce tickets.
• Maintain Runbooks, architecture docs, SOPs and playbooks.
• Mentor security analysts in PAM workstreams and encourage certifications.
• Support flexible shifts per roster and cross-skill across IAM operations.

Skills

CyberArk CORE PAS

CyberArk EPM

Privilege management

Automation

Scripting

REST API

L2/L3 support

Education

BE in CS/Info Security/related

Job description

Staples India Business Innovation Hub Private Limited | Permanent

The Lead Security Analyst should work as a technical SME/Lead for the CyberArk (Core PAS, EPM) solution, key delivery outcomes expected from this role are:

• Onboarding and management of privileged accounts and platforms into CORE PAS for password vault, privilege session management.
• Onboarding and management of end point workstations into EPM for enforcing least privileges, application controls and avoid credential thefts.
• Analyze requirements related to MINOR enhancements, solution design, implement, test and deploy
• Understand the solution architecture and design done by the engineering team for new business requirements. Clarify and transition seamlessly for Operations.
• CyberArk patch updates, version upgrades. Validation and testing.
• Analyze and resolve L3, L2 tickets.
• Triage & resolve production incidents, restore the service availability within SLA targets
• Identify manual repetitive tasks, tickets, process gaps. Plan to automate, reduce ticket volumes and improve productivity and efficiency.
• Maintain up to date knowledge repository - Run book, Architecture, Solution design documents. SOPs and Playbooks.
• Mentor and guide the Security analysts and associates deployed for PAM workstream
• Flexible working in shifts as per roster rotation.
• Cross-skilling, Up-skilling in other services under the scope of the IAM operations team
• Motivate the team members to complete the certification related to CyberArk PAM

Beyond the above outcomes, driving continuous service improvements to automate the manual L1/1.5 tasks, Support Program, Project status updates with respect to the Privilege Access Management (PAM) operations workstream.

Requirements

Education Requirements:

Minimum Bachelor's Degree: BE degree in Computer Science, Information Security, or a related field.

Years of Experience: 8-12 years

• 4-5 years of relevant CyberArk CORE PAS implementation and support experience.
• 2-3 years of relevant CyberArk EPM implementation and support experience.

Basic Qualifications:

• 8-12 years of experience in implementation & operations support leveraging Privilege management solution (CyberArk CORE PAS or CyberArk Privilege Cloud).
• Minimum 4-5 years of experience in CyberArk CORE PAS and minimum 2 years of experience in CyberArk EPM.
• Working in shift model as per roster rotation strategy

Technical Skills:

• Hands-on implementation & operations support experience in CyberArk. L2/L3 tickets. Accounts, Servers Onboarding.
• Automation of accounts onboarding, offboarding.

Preferred Qualifications:

• Scripting experience to develop custom PSM, Password plug-ins.
• REST API experience to leverage APIs and automate the onboarding/offboarding lifecycle.