Attack Surface Management And Security Configuration Compliance Sme

Tata Consultancy Services; Charlotte (NC); On-site; USD 75,000 - 120,000; Full time

Job summary

Tata Consultancy Services Limited, based in Charlotte, NC, seeks an Engineer to advance information security and technology risk management. The role focuses on configuring and managing enterprise security controls, collaborating with business units, and delivering effective risk mitigation across diverse technology environments.

The candidate will work with vulnerability management tools such as Qualys, Tanium, Tenable and Symantec, and will develop automation scripts using Python, Bash,

Qualifications

• 8+ years of experience in information security, technology risk management or related field.
• Demonstrated ability configuring and managing technical security controls at an enterprise level
• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium, Tenable, etc.

Responsibilities

• Plan, develop, test and implement configuration compliance policies and technical controls in support of the Secure Configuration Program.
• Manage engagement and work with technology teams to validate baseline policy controls and remediate non-compliance.
• Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Skills

Vulnerability assessment

Scripting (Python/Bash/PowerShell)

Education

Bachelor of Computer Science

Tools

Qualys

Tanium

Tenable

Symantec

Job description

Must Have Technical/Functional Skills:

• 8+ years of experience in information security, technology risk management or related field.


• Demonstrated ability configuring and managing technical security controls at an enterprise level


• with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.


• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium,


• Tenable, etc.


• Familiarity with risk management frameworks and financial industry regulatory requirements.


• Familiarity as a system admin for Unix, Windows, or workstation administration.


• Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.

Roles & Responsibilities

• Plan, develop, test and implement configuration compliance policies and technical controls in support of the


• Secure Configuration Program.


• Manage engagement and work with technology teams to validate baseline policy controls and remediate non-compliance.


• Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Generic Managerial Skills, If any

• CISSP, CISM or similar industry-recognized certifications are preferred.


• Key Words to search in Resume


• Vulnerability management, SAST/DAST, Qualys, Tanium, Tenable, Symantec

Salary: $75,000 - $120,000

Location

Charlotte, NC

Function

TECHNOLOGY

Role

Engineer

ID

436106

Skills

Vulnerability assessment

Salary Range

$75,000 - $120,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE