Security Analyst SSIRT

Orange; Gurugram District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Global Opportunities

Flexible Work Environment

Professional Development & Upskilling

Career Growth within Orange

Health & Well-being programs

Job summary

Orange is seeking a Security Analyst to join its Service Security Incident Response Team (SSIRT). You will monitor, detect, analyze, and respond to security incidents affecting services and infrastructure, collaborating with cross-functional teams to improve our security posture.

You will conduct vulnerability assessments, participate in penetration testing, and drive risk mitigation measures, with a focus on secure migration and incident response for network environments.

Qualifications

• Engineering Degree / Equivalent in Telecommunications field
• Certifications like CCNA / CCIP / CEH / OSCP / CISM / CISSP / CCNP
• Proficient in Microsoft Office applications like Excel, PowerPoint, Word, PowerBI

Responsibilities

• Incident Management: Handle real-time and reactive network security incidents across all managed connectivity areas.
• Migration Governance: Govern bulk and complex migrations using established processes and procedures.
• Escalation Management: Manage escalations for all technical and procedural issues.
• Change Management: Manage and communicate changes driven by evolving customer and business requirements.
• Vulnerability Management: Oversee vulnerability management for connectivity devices, deep analysis and evaluation of vulnerabilities based on vendor bug / PSIRT announcements.

Job description

About us

Join us at Orange Business!

We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.

Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.

About the role

As a Security Analyst within our Service Security Incident Response Team (SSIRT), you will be at the forefront of defending our company's digital assets and services against cyber threats. Your primary focus will be on monitoring, detecting, analyzing, and responding to security incidents affecting our services and infrastructure. You will collaborate with cross-functional teams to ensure timely incident response, mitigation of security risks, and continuous improvement of our security posture.

The Security Analyst will play a key role in vulnerability management, conducting vulnerability assessments and penetration tests to identify and mitigate security weaknesses. The candidate will also be involved in risk management, evaluating security risks and implementing measures to mitigate them effectively. Overall, the Security Analyst will be instrumental in enhancing our organization's security posture and protecting against emerging threats.

About you

Key Responsibilities:

• Incident Management: Handle real-time and reactive network security incidents across all managed connectivity areas.
• Migration Governance: Govern bulk and complex migrations using established processes and procedures.
• Escalation Management: Manage escalations for all technical and procedural issues.
• Change Management: Manage and communicate changes driven by evolving customer and business requirements.
• Problem Management: Conduct root cause analyses and develop service improvement plans related to network security.
• Implementation and Maintenance: Collaborate with technical management teams for the implementation and maintenance of MPLS, MLAN, and SD-WAN networks.
• Vulnerability Management: Oversee vulnerability management for connectivity devices, deep analysis and evaluation of vulnerabilities based on vendor bug / PSIRT announcements.
• Automation: Utilize UNIX and scripting languages to automate configurations and other activities.
• Project Ownership: Provide end-to-end ownership for all network optimization projects, adhering to committed deadlines.
• Training: Provide security training to internal teams to promote compliance and foster a security culture.

Key Result Area:

• Incident management: Timely response & closure of security incidents based on priority and criticality.
• Change Management: Ensure the changes are in aligned with the security standards and configuration guidelines.
• Vulnerability management: Enhancement in the security posture with persistent assessments and mitigation strategies.
• Security Interlock: Interlocks with engineering teams to define and update processes and guidelines, ensuring alignment with security standards.
• Strong interlocks with the technical and service management teams for driving the standards into operations.
• Industry Knowledge: Leverage extensive knowledge of industry trends and best practices to implement effective continuous improvement solutions.
• Security Audits: Conduct and execute security audits on devices, revising protocols as necessary to propose solutions that mitigate security risks.
• Customer Support: Maintain a thorough understanding of tools, systems, and processes required for quality customer support.
• Security Dashboard: Management of the Security Dashboard that displays the security posture across various network areas.

Educational Qualifications

• Engineering Degree / Equivalent in Telecommunications field, preferred.
• Any of the certifications like CCNA / CCIP / CEH / OSCP / CISM / CISSP /CCNP
• Should be competent in Microsoft Office applications like Excel, PowerPoint and Word, PowerBI.

Relevant Experience

• Min. 4 years’ experience in Network Security domain, SD-WAN

Desired skills/knowledge

• Excellent verbal & written communication skills in English language.
• Innovative thinking with an ability to lead and motivate cross-functional, transversal teams.
• Security mindset and network security experience.
• Area of expertise – Router configuration, routing, Access control, SD WAN, Meraki, Scripting.
• Good knowledge of industry standards and compliance requirements.
• Autonomous with ability to work under pressure, dealing with multiple tasks.
• Ability to research and stay up to date with security trends.
• Proven proficiency in developing physical and information security protocols and procedures.
• Telco functioning with Incident and Change management knowledge.
• Must have strong business analysis, process, and tools skills & customer service skills.
• Experience of working with international /cross functional teams desirable.
• Willing to work in flexible support environment.
• Self-Management, Decision-making, Customer Oriented and “Can Do” Attitude.
• Transversal working across Teams.

You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.

What we offer

Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world. Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working). Professional Development: training programs and upskilling/re-skilling opportunities. Career Growth: Internal growth and mobility opportunities within Orange. Caring and Daring Culture: Health and well-being programs and benefits, diversity & inclusion initiatives, CSR and employee connect events. Reward Programs: Employee Referral Program, Change Maker Awards.

Only your skills matter

Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neuroatypia, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.