Infosec Ii

ID: 859 | 3-6 yrs | Bengaluru | careers- About the company:

Clear (From the makers of ClearTax) is on a mission of simplifying the financial lives of Indians. Clearly, Product & Engineering excellence is what defines us and we stand for, and the opportunity is to build products that will shape ClearTax vision. We are looking for engineering leaders who can join our mission to simplify the financial lives of Indians.
Our engineers are involved in all parts of the product life cycle: idea generation, design, planning, execution, and shipping. We create reliable, scalable and highly performant systems.
A commitment to teamwork, hustle and good communication skills are key requirements.

Role Overview:

This role is part of the Information Security Team, Engineering division of ClearTax India. This person will be responsible to secure all enterprise and cloud infra and services, educating IT and DevOps teams in fixing the issues, making sure the infrastructure is compliant to different security standards and compliances as we will have to provide these details to our corporate customers as a part of their onboarding process. You will be a critical resource in driving ClearTax's Data Protection programs. You will work together with team members across the organization to deliver world class services which improve ClearTax’s security posture. You'll make key technical decisions and communicate them effectively. You will own solutions and drive projects delivering those solutions through to completion. We are looking for someone with a high level of technical talent with an emphasis on infrastructure services, proxy systems, networking technologies, automation/scripting, and experience with API's who can help our team deliver in an extremely fast paced environment.

Duties & Responsibilities:

- Self-starter; demonstrates personal initiative and willingly assumes responsibility and ownership. Ability to drive efforts based around organizational priorities with mínimal management oversight.
- You will partner with architects, engineers, devops, site reliability engineers across the organization; perform security design assessments, paint the overall risk picture, and help find solutions for the risks and vulnerabilities you identify.
- As a domain expert across infrastructure, data platforms, and network security you will define reusable security patterns, control requirements, and lead security improvement initiatives on internal and member-facing services and infrastructure that support our members and employees. You will be successful if ClearTax continues to build infrastructure that is secure.
- Guide the technology organization's security and privacy initiatives by participating in reviews. Perform security reviews, evaluations, risk assessments, and monitoring on a regular basis to ensure exceptions and violations are identified and addressed during desktop and onsite audits
- Ability to solve problems at their root and step back to understand the broader context.
- Develop and deliver security training across the company.
- Ability to implement and drive information and data security initiatives.
- Develop and interpret security policies and procedures.
- Perform and oversee Information Security Policy Framework
- Deep knowledge of common software vulnerabilities, such as OWASP Top 10 and CWE/SANS Top 25.
- Manage multiple projects and efforts at the same time.
- Experience in providing practical solutions that enable product teams to meet business goals while controlling security risk.
- Provide direction to junior members of the team.
- Ability to promote secure design principles and a security-focused outlook across a large organization.
- Plan and assist in developing strategic direction for information security and compliance initiatives.
- Evaluate and recommend new and emerging security technologies for use inside and outside the security organization.

Job Requirements / Qualifications:

- Bachelor’s degree + 6 years in a technical discipline.
- Any relevant certifications such as CISM, CISSP, CSSLP, AWS Security Specialty, AZ-500, etc
- Experience with one or more programming languages like C, C++, GoLang, Java development environments.
- Strong knowledge of computer security principles and best practices.
- Experience with Information Security Policy and Procedure development and implementation.
- Knowledge of common security-related protocols and their design (i.e. SSH, IPsec, TLS, etc.).
- Familiarity with security tools like Nessus, Snort, OpenVAS.
- Strong English (both oral and written) skills and strong problem-solving skills.
- Having Security Certification will be an added plus.