Quantiphi | Cloud Security Architect

Company Profile

Quantiphi is an award-winning AI-first digital transformation engineering company driven by the desire to solve transformational problems at the heart of the business. We are passionate about our customers and obsessed with problem-solving. Quantiphi solves our clients’ toughest and most complex business problems by combining deep industry experience, disciplined cloud and data-engineering practices, and cutting-edge artificial intelligence research to achieve quantifiable business impact at unprecedented speed. Some company highlights:

● Delivered 2.5x growth YoY since its inception in 2013. ● Headquartered in Boston with 4000+ Quantiphi professionals across the globe.

● Winner of the “Data Analytics” and “Public Sector” Partner of the Year from Google for 2020

● Winner of the “America's Service Delivery Partner of the Year” award from NVIDIA for 2021.

● Recognized by top global analyst firms like Gartner, Frost & Sullivan, IDC, Fast Company, ISG & Everest group as an industry leader in the AI-led digital transformation across categories.

● Recognized by Everest Group as “Specialist Leader” and “Start Performer” in Analytics and AI Services.

● Winner of “Industry Partner of the Year” and “AI/ML partner of the Year” from AWS regional and global team for 2022.

● Recognized by Gartner as a leading Vendor for US Healthcare Payers 2022 and for Healthcare Data, Analytics and AI 2022, in the AI strategy category.

● Recognized under India's 40 Best Workplaces in Health and Wellness 2022.

● Certified as a Great Place to Work for the third year in a row- 2021, 2022, 2023.

For more details, visit: our Website or our LinkedIn Page

Job Description

Role: Technical Architect - Cybersecurity

Experience Level: 8 Year and above

Work location: Mumbai, Bangalore & Trivandrum

What you’ll do:

You will be working as a cloud security Architect within the cloud security practice in GCP channel. You will be ideating and developing the accelerators and capabilities alongside the Practice lead and assist in the Pre-sales cycle. You would also be involved in the delivery of the security related projects.

Role & Responsibilities:

● Drive Practice Innovation: Be a thought leader in shaping the practice portfolio. Identify areas for improvement and develop strategies to enhance our service offerings.

● Accelerate Delivery: Design and build accelerators and tools that optimize project workflows and expedite delivery timelines.

● Architect Solutions: Design and create secure, scalable architectures tailored to unique client use cases.

● Security Champion: Plan, research, and design robust security architectures for all IT projects, ensuring compliance and data protection.

● Project Delivery: Work collaboratively with customer teams as a trusted architect to ensure successful project execution.

● Security Collaboration: Partner closely with the internal Cybersecurity team to leverage advanced tooling and develop cutting-edge security capabilities

. Skills expectation:

● Essential: o Cloud Security Expertise: Demonstrated hands-on experience in cloud security on a major platform (AWS, GCP, or Azure) with GCP being a plus. o Security Architecture Design: Proven track record of designing and implementing secure IT solutions and architectures. o Compliance Knowledge: Thorough understanding and experience with industry-standard compliances like HIPAA, GDPR, ISO, and NIST

● Leadership: o Thought Leadership: Ability to provide thought leadership to the team, introducing best practices and innovative approaches. o Technical Mentorship: Proven ability to lead and mentor technical teams, accelerating their performance. o Conflict Resolution: Skilled at managing internal and external stakeholders, effectively resolving conflicts. o Agile Project Management: Experience leading large projects using Agile methodologies with a deep understanding of Agile development concepts.

● Communication: o Effective Communicator: Excellent communication skills, able to clearly explain complex subjects and technical plans to both technical and non-technical audiences. o Risk Identification: Proven ability to identify and assess risks associated with business processes, operations, technology projects, and information security programs.

● Desirable: o Agile Methodologies: Experience with Agile/Scrum/DevOps software development methodologies. o Cloud Native Technologies: Experience working with cloud-native technologies. o Security Focus: Experience with AiSecOps (Security integrated into DevOps) is a plus. o Security Certifications (any of the following): OSCP, CISSP, CISO, CISM, CEH, CCSP, CCSK, ECSA, Security+, CCNA What is in it for you:

● Sponsored certification opportunity for various courses of your choice (eg, GCP, AWS, Azure, Tableau, Looker,etc)

● Growth and Development: The role emphasizes innovation and thought leadership, suggesting opportunities to learn new technologies, stay current with industry trends, and potentially contribute to shaping the company's security practices.

● Project Impact: You'll be working directly on client projects, ensuring successful delivery and having a tangible impact on the business. COMMENTS Broad

Summary:

● Responsible for “Google Chronicle" SIEM/ SOAR content development such as correlation rules, dashboards, reports, custom parsers, SOAR Playbooks.

● This involves researching and understanding security threats and vulnerabilities and translating that knowledge into actionable content that can be used to detect and respond to security incidents. Roles & Responsibilities:

● Expert in developing complex correlation rules, playbooks, policies, and custom parsers.

● Monitor the effectiveness of content and tune content to minimize false positives and maximize true positives

● Conduct ongoing research and participate in industry forums and conferences to stay up to date with the latest security trends to ensure content effectiveness in detecting and preventing new threats.

● Automate content development and maintenance processes including the use of scripting and other automation tools to streamline content creation and testing.

● Design and implement security automation and orchestration workflows for areas such as incident triage, threat intelligence and vulnerability management using SOAR platforms, scripting, and API integration.

● Integrate security tools into the SOAR platform.

● Manage and analyze data related to security incidents, threats, and vulnerabilities to identify trends and patterns and use this to develop more effective workflows and improve overall security operations.

● Maintain detailed logs and reports of security automation and orchestration activities, including metrics related to workflow efficiency, incident response times and threat detection rates to provide internal and external stakeholders with updates on SOAR effectiveness.

Professional & Technical Skills:

● At least 5+ years of experience in Information Security, Risk Management, Infrastructure Security.

● 4+ years of hands-on experience on developing use cases with deep understanding on SIEM configurations, SOAR Playbooks, log parsing etc.

● Expert in developing complex correlation rules, playbooks, policies, and custom parsers.

● Creation of customized dashboards, alerts, and reports. ● Good understanding of Regular Expression (REGEX), Yara L.

● Excellent verbal and written communication skills.