Lead Security Analyst - CyberArk

Staples India; Chennai District; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Staples India is seeking a Lead Security Analyst to serve as a technical SME for CyberArk Core PAS and EPM. You will own onboarding, password vaulting, privilege session management, and endpoint protection, while mentoring analysts and driving automation to reduce manual tasks.

The role requires significant experience across PAM projects and shift-based operations. You will collaborate with engineering and IAM teams to translate requirements into secure, scalable PAM solutions, maintain

Qualifications

• 8-12 years of experience in implementation & operations support leveraging Privilege management solutions (CyberArk CORE PAS or CyberArk Privilege Cloud).
• Minimum 4-5 years of experience in CyberArk CORE PAS and minimum 2 years of experience in CyberArk EPM.
• Working in shift model as per roster rotation strategy.
• Team collaboration, Effective communication.

Responsibilities

• Onboard and manage privileged accounts and platforms into CyberArk CORE PAS for password vault and privilege session management.
• Onboard and manage end point workstations into EPM for enforcing least privileges and application controls.
• Analyze requirements related to MINOR enhancements, solution design, implement, test and deploy.
• Understand the solution architecture and design for new business requirements and transition to Operations.

Skills

CyberArk Core PAS

CyberArk EPM

Privilege management

Automation

Scripting (PowerShell/Python)

Education

BE in Computer Science or Information Security

Tools

REST API

Job description

Role Summary

The Lead Security Analyst should work as a technical SME/Lead for the CyberArk (Core PAS, EPM) solution, key delivery outcomes expected from this role are:

• Onboarding and management of privileged accounts and platforms into CORE PAS for password vault, privilege session management.
• Onboarding and management of end point workstations into EPM for enforcing least privileges, application controls and avoid credential thefts.
• Analyze requirements related to MINOR enhancements, solution design, implement, test and deploy
• Understand the solution architecture and design done by the engineering team for new business requirements. Clarify and transition seamlessly for Operations.
• CyberArk patch updates, version upgrades. Validation and testing.
• Analyze and resolve L3, L2 tickets.
• Triage & resolve production incidents, restore the service availability within SLA targets
• Identify manual repetitive tasks, tickets, process gaps. Plan to automate, reduce ticket volumes and improve productivity and efficiency.
• Maintain up to date knowledge repository – Run book, Architecture, Solution design documents. SOPs and Playbooks.
• Mentor and guide the Security analysts and associates deployed for PAM workstream
• Flexible working in shifts as per roster rotation.
• Cross-skilling, Up-skilling in other services under the scope of the IAM operations team
• Motivate the team members to complete the certification related to CyberArk PAM

Beyond the above outcomes, driving continuous service improvements to automate the manual L1/1.5 tasks, Support Program, Project status updates with respect to the Privilege Access Management (PAM) operations workstream.

Requirements

Education Requirements

Minimum Bachelor’s Degree: BE degree in Computer Science, Information Security, or a related field.

Years of Experience

8-12 years

• 4-5 years of relevant CyberArk CORE PAS implementation and support experience. 2-3 years of relevant CyberArk EPM implementation and support experience.

Basic Qualifications

• 8-12 years of experience in implementation & operations support leveraging Privilege management solution (CyberArk CORE PAS or CyberArk Privilege Cloud).
• Minimum 4-5 years of experience in CyberArk CORE PAS and minimum 2 years of experience in CyberArk EPM.
• Working in shift model as per roster rotation strategy
• Team collaboration, Effective communication

Technical Skills

• Hands-on implementation & operations support experience in CyberArk. L2/L3 tickets. Accounts, Servers Onboarding.
• Automation of accounts onboarding, offboarding.

Preferred Qualifications

• Scripting experience to develop custom PSM, Password plug-ins.
• REST API experience to leverage APIs and automate the onboarding/offboarding lifecycle.