Principal Engineer - Security

LogiNext; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

A leading tech firm is seeking a Principal Engineer - Security in Mumbai, India. This role involves designing and implementing security infrastructure, acting as a subject matter expert, and leading large-scale projects. Ideal candidates will have extensive experience in Cyber Security, technical certifications, and proven leadership skills. Applicants should be adept in IAM, DevSecOps, and automation tools. This unique opportunity allows a skilled engineer to optimize processes and methodologies for crucial security components within the organization.

Qualifications

• 8 to 10 years of experience in Cyber Security.
• At least one professional level technical certification.
• 3+ years as SME, architect, or principal engineer on large-scale security projects.

Responsibilities

• Design, implement, and lead the security infrastructure build-out.
• Function as the SME for security-related infrastructure.
• Assist Enterprise Cybersecurity teams with hardening initiatives.

Skills

Network security

Identity and Access Management (IAM)

DevSecOps

Continuous monitoring

Enterprise desktop security

Zero-trust architecture principles

Security incident remediation

Automation (PowerShell, Python, Bash)

Education

Bachelor’s degree in Computer Science, Engineering, Cyber Security, or a related field

CISSP, CISM, CEH, Azure Security Engineer certifications

Tools

BigFix

InTune

Imperva

Snort

Nessus/Nexpose

Job description

Overview

LogiNext is looking for a Principal Engineer - Security to join our team! As a Principal Engineer - Security, you’ll lead the effort to design, implement, operate, support, and maintain the security infrastructure and supporting tools that are necessary to protect internal and external assets on networks that support our corporate infrastructure and applications. You’ll be the SME and primary technical resource for projects, and you’ll facilitate outstanding documentation of the architecture, configurations, processes, maintenance procedures, and service desk support functions.

The well qualified candidate will possess the ability to integrate at a high level the knowledge of several areas including network security, IAM, DevSecOps, continuous monitoring, enterprise desktop security, zero-trust architecture principles, security incident remediation, red/blue team exercises, securing multi-cloud and private cloud environments, and more. As we embrace separation of duties, this role will be a critical check and balance that reviews changes in the environment developed by other cybersecurity teams and thereby ensures changes are appropriate and don’t introduce additional risk/liability.

This is an extremely unique opportunity and allows an excellent engineer to build the most efficient processes, workflows, and methodologies for implementing, monitoring, managing, and maintaining the most critical components of the entire organization. The engineer chosen for this position should adapt quickly and manage constant change effectively.

Responsibilities

• Design, implement, and lead the build-out of security infrastructure and tools
• Function as the SME for security related infrastructure, architecture, and operations
• Take functional ownership of all security related architecture and design following standards set forth by the enterprise cybersecurity teams
• Ensure the quality and accuracy of implementations, upgrades, configuration changes, and break/fix activities
• Assist the Enterprise Cybersecurity teams with hardening initiatives which include monitoring for baseline configuration compliance across all pertinent systems and tools
• Identify and make recommendations citing strong evidence for material changes in policies, standards, established architecture, and best practices where necessary to further enhance security posture
• Work closely with application development teams to ensure a successful implementation of DevSecOps complete with automated testing using tools and processes you will create

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cyber Security, or a directly related field. Education requirements may be replaced with previous related work experience and cyber security certifications (CISSP, CISM, CEH, Azure Security Engineer, etc.)
• 8 to 10 years working in the Cyber Security
• At least one professional level technical certification such as CCNP – Security, GIAC certifications, or another industry-recognized security-related certification
• Experience in SOC II, ISO and VAPT required
• 3+ years acting as the SME, architect, or principal engineer on large-scale security infrastructure projects
• Design and implementation experience with tools such as BigFix, InTune, Imperva, Snort, Nessus/Nexpose, and others that are similar
• Experience designing and implementing Enterprise wide -authentication and identity solutions
• Experience with Azure AD/Active Directory Single Sign-On (SSO), Multi-Factor Authentication (MFA), Application Registration, Identity Federation, Automation
• Experience with automation using PowerShell, Python, Bash, etc…
• Excellent troubleshooting and root cause diagnosis skills
• Strong writing and communication skills
• Strong leadership experience and team management skills.
• Experience creating and maintain accurate and detailed guidelines and procedures
• Experience with Agile Scrum Methodology and Azure DevOps