Cybersecurity Specialist

Role Overview:

As a seasoned cybersecurity specialist, you will play a pivotal role in safeguarding sensitive data, ensuring compliance with regulatory frameworks, and strengthening our security posture.

Key Responsibilities:

• Develop and implement an enterprise-wide cybersecurity strategy, incorporating frameworks and controls to mitigate risks.
• Monitor, detect, and respond to cyber threats and incidents using advanced SIEM and SOC processes.
• Conduct vulnerability assessments, penetration testing, and red team exercises to fortify our defenses.
• Perform digital forensics, root cause analysis, and incident response lifecycle management to minimize downtime.
• Define and enforce policies for data privacy, identity and access management, and DLP to ensure confidentiality and integrity.
• Secure infrastructure across network, endpoint, application, database, and cloud environments to prevent unauthorized access.
• Implement security controls for cloud services (AWS, Azure, GCP), containers (Docker, Kubernetes), and DevOps pipelines to maintain a secure ecosystem.
• Manage and tune security tools such as firewalls, WAFs, IDS/IPS, EDR, SIEM, SOAR, CASB, and DDoS protection systems to optimize threat detection.
• Collaborate with DevOps teams to embed security into CI/CD pipelines, leveraging DevSecOps practices to ensure seamless integration.
• Ensure compliance with regulatory frameworks (IRDAI, RBI, GDPR, HIPAA, ISO 27001, NIST, PCI-DSS, SOC2) through regular audits and risk assessments.
• Conduct third-party/vendor risk assessments and ensure supply chain security to maintain the highest standards of trustworthiness.
• Lead business continuity and disaster recovery efforts from a security perspective to ensure minimal disruption.
• Drive security awareness programs for employees and stakeholders to promote a culture of security and vigilance.

Required Skills and Qualifications:

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Certifications (one or more preferred): CISSP, CISM, CISA, CRISC (Governance & Risk); CEH, OSCP, OSWE, GPEN (Offensive Security); CCSP, CCSK, AZ-500, AWS Security Specialty (Cloud Security).
• Strong analytical, troubleshooting, and documentation skills.
• Excellent communication skills to interact with business and technical stakeholders.
• Ability to handle high-pressure security incidents and provide timely resolution.
• Leadership capability for senior roles (mentoring SOC teams, driving projects).

Benefits:

Join a dynamic team of cybersecurity professionals dedicated to protecting our digital assets. Enjoy opportunities for growth, professional development, and recognition in a stimulating environment.

Others:

Experience working with security frameworks, regulations, and compliance standards.

Key Requirements:

Network Security: Firewalls, IDS/IPS, VPN, Zero Trust, SD-WAN, NAC.

Endpoint Security: EDR/XDR solutions (CrowdStrike, Carbon Black, SentinelOne, Microsoft Defender).

Application Security: OWASP Top 10, SAST, DAST, RASP, API security.

Cloud Security: CSPM, CWPP, CASB; secure configuration of AWS, Azure, GCP.

Identity & Access Management: IAM, PAM (CyberArk, Okta, Ping, Azure AD, SailPoint).

Data Protection: DLP solutions, encryption (AES, RSA, TLS, PKI), key management, tokenization.

Security Operations: SIEM (Splunk, QRadar, ArcSight, ELK), SOAR, threat hunting, SOC operations.

Threat & Vulnerability Management: Qualys, Nessus, Rapid7, Burp Suite, Metasploit.

Incident Response & Forensics: EnCase, FTK, Volatility, Wireshark, memory forensics.

DevSecOps: Container scanning (Aqua, Twistlock, Snyk), CI/CD pipeline security, IaC scanning.

Governance, Risk & Compliance (GRC): RSA Archer, ServiceNow GRC, ISO/NIST frameworks.