Cybersecurity Specialist

We are seeking an experienced Cybersecurity Specialist to join our team. As a key member of our security team, you will play a critical role in safeguarding sensitive data and strengthening the security posture of our organization.

• Main Responsibilities:
• Analyze and develop enterprise-wide cybersecurity strategies, frameworks, and controls to mitigate potential threats.
• Maintain vigilant monitoring of cyber threats and incidents using advanced SIEM and SOC processes.
• Conduct thorough vulnerability assessments, penetration testing (VAPT), and red/blue/purple team exercises to identify and address potential weaknesses.
• Perform digital forensics, root cause analysis, and incident response lifecycle management to ensure swift and effective resolution of security incidents.
• Define and enforce policies for data privacy, identity and access management (IAM/PAM), and data loss prevention (DLP) to protect sensitive information.
• Secure infrastructure across network, endpoint, application, database, and cloud environments to prevent unauthorized access.
• Implement security controls for cloud platforms (AWS, Azure, GCP), containers (Docker, Kubernetes), and other emerging technologies.
• Manage and tune security tools such as firewalls, WAF, IDS/IPS, EDR, SIEM, SOAR, CASB, and DDoS protection systems.
• Collaborate with DevOps teams to embed security into CI/CD pipelines and adopt DevSecOps practices.
• Evaluate compliance with industry standards and regulations, including IRDAI, RBI, GDPR, HIPAA, ISO 27001, NIST, PCI-DSS, and SOC2.
• Conduct third-party/vendor risk assessments and ensure supply chain security to minimize potential risks.
• Develop and lead business continuity and disaster recovery plans from a security perspective to ensure minimal downtime in case of disruptions.
• Promote security awareness programs for employees and stakeholders to foster a culture of security within the organization.

Required Skills and Qualifications:

Critical Security Areas:

• Network Security: Firewalls, IDS/IPS, VPN, Zero Trust, SD-WAN, and Network Access Control (NAC).
• Endpoint Security: Endpoint Detection and Response (EDR)/XDR solutions (CrowdStrike, Carbon Black, SentinelOne, Microsoft Defender).
• Application Security: OWASP Top 10, Source Code Analysis Security Testing (SAST), Dynamic Application Security Testing (DAST), Runtime Application Self-Protection (RASP), and API security.
• Cloud Security: Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Cloud Access Security Brokers (CASB); secure configuration of AWS, Azure, GCP.
• Identity & Access Management: Identity and Access Management (IAM), Privilege Access Management (PAM) (CyberArk, Okta, Ping, Azure AD, SailPoint).
• Data Protection: Data Loss Prevention (DLP) solutions, encryption (AES, RSA, TLS, PKI), key management, tokenization.
• Security Operations: Security Information and Event Management (SIEM) (Splunk, QRadar, ArcSight, ELK), Security Orchestration, Automation, and Response (SOAR), threat hunting, and Security Operations Center (SOC) operations.
• Threat & Vulnerability Management: Qualys, Nessus, Rapid7, Burp Suite, Metasploit.
• Incident Response & Forensics: EnCase, FTK, Volatility, Wireshark, memory forensics.
• DevSecOps: Container scanning (Aqua, Twistlock, Snyk), CI/CD pipeline security, Infrastructure as Code (IaC) scanning.
• Governance, Risk & Compliance (GRC): RSA Archer, ServiceNow GRC, ISO/NIST frameworks.

Advanced Areas:

• Red/Blue/Purple Teaming: Adversary simulation, MITRE ATT&CK framework.
• Malware Analysis: Reverse engineering, sandboxing.
• Blockchain & IoT Security: Secure protocols, device hardening.
• AI/ML Security: Model poisoning, adversarial attacks (good-to-have for advanced roles).
• Threat Intelligence: STIX/TAXII, MISP, integrating CTI feeds.

Required Qualifications:

• Bachelor's/Master's in Computer Science, Information Security, or related discipline.
• Certifications (one or more preferred):
• CISSP, CISM, CISA, CRISC (Governance & Risk).
• CEH, OSCP, OSWE, GPEN (Offensive Security).
• CCSP, CCSK, AZ-500, AWS Security Specialty (Cloud Security).
• ISO 27001 LA/LI, PCI-DSS, HIPAA, GDPR compliance certifications.

Soft Skills:

• Strong analytical, troubleshooting, and documentation skills.
• Excellent communication skills to interact with business and technical stakeholders.
• Ability to handle high-pressure security incidents and provide timely resolution.
• Leadership capability for senior roles (mentoring SOC teams, driving projects).