Security

3 dedicated L2 onsite experts with a minimum of 5 years' experience to manage Crowdstrike EDR, Forcepoint DLP, and Arcon PAM during business hours.
- Each expert must be skilled in at least 2 out of the 3 platforms and certified by the respective OEMs.
- Continuous certification updates of the resources at the vendor’s expense.
- Replacement resources are needed for planned leaves exceeding 2 days.
- All experts must work from Customer’s Mumbai Office and receive technical support from their internal backend senior resources when needed.
- Only tenured resources from the vendor are acceptable. No fresh hires are allowed.
- Following is the list of indicative activities that the resource needs to perform in various technologies on-site:

- **DLP (Data Loss Prevention)**:

- Configuration and management of DLP tools and policies.
- Monitoring and analysis of data flows across networks, endpoints, and storage systems.
- Incident response for DLP alerts and violations.
- Regular review and update of DLP policies to align with business requirements and compliance standards.
- Integration with other security tools and systems for holistic threat detection and response.
- Providing reports and insights on data usage, compliance, and risk.
- **EDR (Endpoint Detection and Response)**:

- Deployment and configuration of EDR agents on endpoints (workstations, servers, etc.).
- Continuous monitoring of endpoint activities for signs of malicious behavior or compromise.
- Incident detection, investigation, and response on endpoints.
- Threat hunting to proactively identify advanced threats or vulnerabilities.
- Patch management and vulnerability remediation on endpoints.
- Integration with SIEM (Security Information and Event Management) for centralized visibility and correlation of security events.
- Providing insights and recommendations for improving endpoint security posture.
- **PAM (Privileged Access Management)**:

- Deployment and configuration of PAM solutions to manage privileged accounts and access.
- Implementation of least privilege access principles to restrict access rights.
- Monitoring and auditing privileged access activities for compliance and security.
- Workflow automation for privileged access requests, approvals, and provisioning.
- Integration with identity and access management (IAM) systems for user lifecycle management.
- Privileged session monitoring and recording for accountability and forensics.
- Periodic access reviews and recertifications for privileged accounts.
- Providing recommendations for enhancing PAM capabilities based on industry best practices and emerging threats.
- **General Management and Support**:

- Regular maintenance, updates, and patches for DLP, EDR, and PAM solutions.
- 24/7 incident response and support for security incidents related to these systems.
- Performance monitoring and optimization of DLP, EDR, and PAM infrastructure.
- Training and knowledge transfer to internal teams for effective utilization of these security technologies.
- Documentation of configurations, processes, and procedures related to DLP, EDR, and PAM.
- Compliance and Reporting:

- Ensuring compliance with relevant regulations (e.g., GDPR, PCI DSS) through DLP, EDR, and PAM controls.
- Generating compliance reports and documentation as required by regulatory bodies or internal policies.

Participating in audits and assessments related to DLP, EDR, and PAM functionalities and controls

Pay: From ₹500,000.00 per year

**Benefits**:

- Health insurance
- Provident Fund

Work Location: In person