Job Description:
Location: Pune
Work Experience: 3 to 6 years
Notice Period: Immediate to 40 days
Roles and Responsibilities:
- Vulnerability Assessment: Conduct regular vulnerability assessments and scans on the organization’s IT systems, networks, and applications using industry-standard tools.
- Risk Assessment: Evaluate the severity and potential impact of identified vulnerabilitieand prioritize them based on risk and business impact.
- Documentation: Maintain an up-to-date inventory of vulnerabilities, their details, and remediation status.
- Remediation Coordination: Collaborate with stakeholders from IT/Business and security teams to ensure timely remediation of identified vulnerabilities. Track and report progress on remediation efforts.
- SIEM/Security Tools Management: Maintain and configure security monitoring tools, ensuring they are up to date and properly tuned to detect threats effectively.
- Incident Response: Assist in incident response activities, including containment, eradication, and recovery efforts, following established incident response procedures.
- Documentation: Maintain detailed records of security incidents, actions taken, and their outcomes for reporting and compliance purposes.
- Collaboration: Collaborate with other IT and security teams to implement security measures and recommend improvements to security controls.
- Threat Intelligence: Stay updated on emerging security threats and vulnerabilities and adjust the vulnerability management program accordingly.
- SOAR: Develop and implement automated playbooks for threat remediation.
Required Qualifications and Experience:
- Advanced knowledge of VM tools, SIEM and related operational activities.
- Team player who can collaborate with stakeholders across multiple departments and is eager to learn more about the domain and industry.
- Proficient in MS Excel, Word & PPT.
Qualifications:
- Bachelor of Engineering/M.B.A. or any other relevant Information Security Course with at least 3 years of relevant experience.
- Desirable: CISSP, ECSA, Trainings/Certifications on relevant security technologies.