Principal Information Security Engineer

Company SummaryFirst American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies. FAI is a proud member of the FORTUNE 500 companies and has been amongst the Fortune 100 Best Companies to Work For list for eight consecutive years. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office, and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. First American (India) has been ranked amongst India's Best Companies To Work For 2023: Listed amongst the Top 100 by Great Place To Work India, FAI is also certified Best Workplaces for Women and Workplace with Inclusive Practices. Software Services helps build First American's product suite that encompasses the best in class Title Insurance, Settlement and Mortgage solutions platforms. Leverages technology product stack across Microsoft platform predominantly to develop, enhance and maintain the best in class applications. The R & D division delivers solutions for the title insurance industry leveraging the best of NLP, AI and ML.Job Summary

Principal Information Security Engineer will implement, maintain, and monitor network, cloud, and endpoint security systems to protect sensitive data and prevent unauthorized access. They will focus on information security operations, policy/procedure development including vulnerability management and incident/event management. They will drive progress and work to enhance the cybersecurity team by developing documentation, identifying potential improvements, and work to increase overall team competency. They will also work with other security teams and application teams to troubleshoot, perform tests, and recommend improvements to remove network vulnerabilities and reduce overall risk.

Competencies:

• Follow ITIL practices regarding incident, problems and change.
• Updating, creating, and maintaining documentation on standard process and procedures for team use
• Providing guidance and support to technical teams on security standards and industry best practice
• Performing security operations and maintenance using security tools
• Manage and assist in performing on-going security monitoring of information systems including assessing information security risk through qualitative risk analysis on a regular basis
• Assessing the impact of emerging threats and managing teams to co-ordinate appropriate remedial actions
• Evaluating and recommending new information security technologies and counter-measures against threats to information or privacy
• Designing and implementing dashboards and data visualizations for various stakeholders  and escalate problems to the respective authority when needed
• Ensuring that disaster recovery and emergency operating procedures are in place and tested on a regular basis - Conducting risk analysis to identify critical operations and systems that are core to continued business operations in the event of a disruption
• Applying professional judgment in complex situations and handle effectively multiple tasks, initiatives and priorities

Technical Skills:

• Good understanding of network services, vulnerabilities and attacks
• Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls such as Cisco, Palo Alto, etc., content filtering, and packet inspection
• Hands on experience on Palo Alto (virtual, physical and management)
• Hands on Experience on Palo Alto Prisma Access
• Hands-on experience on Cisco Firewalls
• Good understanding on Azure Cloud Security -or- AWS Cloud Security
  • Azure/AWS/OCI - Cloud Security logging and monitoring (Splunk)
  • Azure/AWS/OCI - Cloud Configuration and Compliance (Prisma Cloud, Prisma Compute)
  • Azure/AWS/OCI - Cloud Security Services (Network Security Group)
  • Good to have - Oracle Cloud Security
  • Fundamentals of GCP.
• Good understanding OSI model
• Technical troubleshooting skills with emphasis in the security technologies: (Palo Alto / Cisco & (AWS or Azure))
• Basic knowledge of any scripting languages or automation (Automation and/or orchestration of processes)
• OS Concepts Windows, Linux and Unix server platforms
• Endpoint Security and Compliance: Microsoft defender and Sentinel One
• Understanding of Privileged Access Management
• Understand networking/routing/switching and connectivity between clouds
• Understands encryption/decryption include TLS, forward proxy, and certificate management
• Understanding of Service First ticketing system
• Good understanding of security concepts, compliance, audit and benchmarks/frameworks
• Driving the development and ongoing tuning and optimization of security event monitoring and analysis application platforms
• Assisting in establishing and supporting enterprise policies, processes, and standard Service level agreement levels

FAI is committed to create an environment that respects, supports and inspires all individuals. We do not discriminate on the basis of color, religion, sex, gender identity, sexual orientation and age. At FAI, we celebrate diversity and believe that an inclusive workforce benefits employees, the organization and our community. We are an Equal Opportunity Employer. For more information about our company and dedication to putting People First, check out

---