Open Source COE Security Architect

Hewlett Packard Enterprise Development LP; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Health & Wellbeing

Personal & Professional Development

Unconditional Inclusion

Job summary

Hewlett Packard Enterprise seeks an experienced Open Source COE Security Architect in Bengaluru to lead security strategy and open-source initiatives. The role requires deep IT/cyber security expertise, experience with CI/CD and DevSecOps, and a strong understanding of cloud security, frameworks, and compliance.

Onsite with customer/partner offices and global collaboration. The candidate should possess 10+ years in IT with at least 6+ years in security, along with key certifications.

Qualifications

• BE/B.Tech with 10+ years of IT experience and 6+ years in information security/cyber security.
• Expert-level knowledge in IT/cyber security with the latest technologies, architectures, vulnerabilities and threats.
• Certifications such as CISSP, CISM, CCSP, CCSK, or ISO27001 are highly desirable.
• Strong knowledge of global security assessment frameworks like NIST, MITRE and CSA.
• Experience in cloud security, DevSecOps, CI/CD and open-source security tools.

Responsibilities

• Provide security vision and strategy to drive open-source security programs aligned to organizational goals.
• Advise leadership on evolving open-source security landscapes, risks and mitigations.
• Develop executive roadmaps for security improvements across security and DevSecOps teams.
• Lead risk management, gap analyses and audits for information security.
• Implement cyber security policies and open-source security solutions in OpenStack environments.

Skills

CISSP

CISM

CCSP

CCSK

ISO27001

Education

BE/B.Tech

Tools

Linux

OpenStack

CI/CD

Job description

Open Source COE Security Architect

This role has been designed as ‘’Onsite’ with an expectation that you will primarily work from an HPE partner/customer office.

Who We Are: Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.

Job Description: HPE Operations is our innovative IT services organization. It provides the expertise to advise, integrate, and accelerate our customers’ outcomes from their digital transformation. Our teams collaborate to transform insight into innovation. In today’s fast paced, hybrid IT world, being at business speed means overcoming IT complexity to match the speed of actions to the speed of opportunities. Deploy the right technology to respond quickly to market possibilities. Join us and redefine what’s next for you.

What you will do

• Expert in IT/Cyber Security field.
• Should be CISSP/CISM/CCSP and CCSK and ISO27001 Certification are desired.
• Should have good knowledge of security assessment against different global Frameworks like NIST, MITRE and cloud security alliance etc.
• Should have good understanding of Compliance and regulatory requirements.
• Working with information security and DevSecOps teams in a CI/CD environment as well as comprehensive understanding of cloud security systems.
• Programming experience in C/C++, Python, JavaScript, Bash & PowerShell Scripting is desired.
• Hands-on expertise, Linux, Kernel, threads, processes, API etc. is desired.
• Provide Security Vision & Strategy to the Organization, strategic direction, development, and implementation of information security programs and projects to address risks relevant to the attainment of organizational strategic security goals based on open source tool/framework.
• Experience in advising leadership team regarding evolving of open source Security Technology landscape, product issues, security mitigations for identified risks and possible improvements.
• Expertise in providing executive roadmaps for continual improvement in teams, technology, and processes, process across various security & DevSecOps teams based on open source tool/framework.
• Experienced in Information Security Risk Management, gap analysis, Audits.
• Hands-on Experience in formulating Cyber Security Policies, design and implementation of Security Technologies, DevSecOps.
• Working Knowledge in implementation of Cyber Security Solution in Open Source, Open Stack environment.
• Ability to provide strategies to increase the ability to withstand cyber-attacks, as measured by annual sophisticated attack simulations.
• Experience in upgrading, troubleshooting and tuning of Cyber Security Solutions.
• Thorough understanding and good knowledge of latest Cyber Security technologies, security Architectures, vulnerabilities, security threats.
• Ability to setup PoC for latest open source security solutions.
• Good understanding of Open-Source Technologies, Cloud security technologies.

What you need to bring

• BE/B.Tech with 10+ years of experience in the IT industry and 6+ years of experience in Information Security / Cyber Security field.
• Expert-level knowledge in the IT/Cyber Security field, with a thorough understanding of the latest security technologies, architectures, vulnerabilities, and threats.
• Desired certifications include CISSP, CISM, CCSP, CCSK, or ISO 27001.
• Strong knowledge of global security assessment frameworks like NIST, MITRE, and the Cloud Security Alliance (CSA).
• A deep understanding of compliance and various industry regulatory requirements.
• Proven experience in developing security vision, strategy, and executive roadmaps for an organization based on open-source tools.
• Hands-on experience in Information Security Risk Management, conducting gap analysis, managing audits, and formulating Cyber Security Policies.
• Comprehensive understanding of cloud security systems and working with DevSecOps teams in a CI/CD environment.
• Working knowledge of implementing, upgrading, troubleshooting, and tuning Cyber Security Solutions, particularly in Open Source and OpenStack environments.
• Desired programming and scripting experience in C/C++, Python, JavaScript, Bash, and PowerShell.
• Hands-on expertise with the Linux operating system, including its Kernel, threads, processes, and APIs.
• Experience advising leadership teams regarding the evolving security landscape, product issues, and risk mitigation strategies.
• Ability to provide strategies to withstand sophisticated cyber-attacks and experience with annual attack simulations.
• Proven ability to set up Proof of Concepts (PoCs) for new and emerging open-source security solutions.

What We Can Offer You

• Health & Wellbeing We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.
• Personal & Professional Development We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have - whether you want to become a knowledge expert in your field or apply your skills to another division.
• Unconditional Inclusion We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

Let’s Stay Connected: Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE. #india #operations

Equal Employment Opportunity

• Hewlett Packard Enterprise is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need.
• Hewlett Packard Enterprise provides equal employment opportunity to any employee or applicant without regard to race, gender, color, race, ethnicity, religion, creed, national origin, ancestry, citizenship, age, marital status, sexual orientation, gender identity and expression, physical or mental disability, medical condition, pregnancy, protected veteran status, uniformed service status, familial status, genetic information, political affiliation, or any other characteristic protected by federal, state, or local law.
• Hewlett Packard Enterprise will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.
• Hewlett Packard Enterprise is an EEO Protected Veteran/ Individual with Disabilities.
• HPE is an E-Verify employer. HPE is an E-Verify employer.
• HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here. Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.
• Please ensure the resume you submit to us does not include any sensitive personal data. Sensitive personal data includes data revealing information about your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation. To the extent the resume you submit does contain this type of personal data, you consent to the storing and processing of this data by HPE for the purpose of reviewing and managing your application.

Job

Services Job Level: TCP_04