Job Title:  IT Security Engineer

Job Summary

1. Managing IT security requirements of - Standards ISO 27001:2013 (ISMS), ISO22301:2012 (Business Continuity Management) - developing policies, procedures and standards to ensure the confidentiality, integrity, availability and privacy of information.      
2. Performing periodically system, network and application’s VAPT (Vulnerability Assessment and Penetration Testing) using automated and manual approach (should have experience with various security assessment tools like Nessus professional, Burpsuite, Kali Linux, NMAP, etc.).        
3. "Conduct IT Risks Assessment, Analyse current risks and identify potential threats and work for risks remediation.
4. Perform Root Cause Analysis (CA) and Corrective Action/Preventive Action (CAPA) for Information Security Incident. Involvement in corrective and preventive action, lessons learnt and identifying the best practices.          
5. Understanding of core infrastructure protocols/services - SSL/TLS, Cipher Suites, LDAP, SNMP, SMTP, DNS, DHCP, FTP/SFTP, SSH, etc.
6. Monitoring SIEM security events and follow up with service owners for action on suspicious activities.   
7. Participate in SOC 2 controls review and follow up with stackholders for remediation as required.            
8. Monitoring compliance status of Antivirus and Security Patch management   
9. Bitlocker encryption management        
10. Knowledge of Microsoft Office programs (PowerPoint, Word, Excel, etc.).

Educational Qualification

Skills

Experience