Cyber Security Engineer

Company Profile

Our client is a global IT services company that helps businesses with digital transformation with offices in India and the United States. It helps businesses with digital transformation, provide IT collaborations and uses technology, innovation, and enterprise to have a positive impact on the world of business.

With expertise is in the fields of Data, IoT, AI, Cloud Infrastructure and SAP, it helps accelerate digital transformation through key practice areas - IT staffing on demand, innovation and growth by focusing on cost and problem solving.

Job Profile: Operational Security Engineer

Location: Chennai, India

Preferred experience: - 9.1-12 years

The Role:

The Operational Security Engineer is responsible for implementing and managing technical access controls, Privileged Access Management (PAM), Data Loss Prevention (DLP), infrastructure vulnerability management, application security, and cybersecurity compliance. The role involves protecting organizational data and systems, managing security risks, ensuring regulatory compliance, and coordinating with APAC and global IT security teams.

Responsibilities:

· Identify, classify, prioritize, track, and remediate infrastructure vulnerabilities across IT assets.

· Ensure regular vulnerability assessment coverage and coordinate remediation activities with IT Development and Production teams.

· Configure and optimize vulnerability assessment tools such as Rapid7 Nexpose, Tanium, and Qualys.

· Implement application security practices, including Secure SDLC, DevSecOps, threat modelling, SAST, DAST, and Software Composition Analysis (SCA).

· Conduct application security reviews and risk assessments to ensure compliance with established security standards.

· Monitor production security, vulnerability remediation, and compliance across production environments.

· Ensure alignment with organizational security policies and applicable regulatory requirements, including HKMA, MAS, GDPR, and FINMA.

· Apply security frameworks such as NIST, CIS, and ISO 27001 to assess compliance and address security gaps.

· Manage third-party technology risks and ensure adherence to cloud security requirements.

· Coordinate with APAC Business Information Security, Production Security, and global IT security teams to implement security controls.

· Identify, document, assess, and monitor cybersecurity risks and coordinate risk treatment and remediation activities.

· Manage Data Loss Prevention (DLP) and IT security incident-related activities, including investigation, follow-up, and closure.

· Ensure IT assets and applications are onboarded into Security Information and Event Management (SIEM) systems and maintain relevant documentation.

· Prepare periodic cybersecurity reports, vulnerability dashboards, compliance updates, and security status reports for management.

· Protect Wealth Management business data, applications, and infrastructure through appropriate security controls and risk management processes.

Must - Have Qualifications:

· 9–12 years of experience in Information Security or Cybersecurity, with a Bachelor's degree or equivalent qualification.

· Strong experience in infrastructure vulnerability management, including vulnerability assessment, prioritization, remediation, and patch management.

· Hands-on experience with vulnerability assessment tools such as Qualys, Rapid7 Nexpose, and Tanium.

· Strong knowledge of Application Security, including Secure SDLC, DevSecOps, Threat Modelling, SAST, DAST, and SCA.

· Experience with IT security compliance frameworks and standards, including NIST, CIS, and ISO 27001.

· Strong understanding of cybersecurity threats, security controls, vulnerability remediation, and IT security methodologies.

· Experience in IT security risk assessment, risk management, and remediation planning.

· Knowledge of banking security requirements and regulatory compliance, including HKMA, MAS, GDPR, and FINMA.

· Experience in production security, security reviews, vulnerability tracking, and compliance reporting.

· Knowledge of IT incident management, CSIRT, Data Loss Prevention (DLP), and Security Information and Event Management (SIEM).

· Experience in evaluating technical architectures, implementing security controls, and improving security processes.

· Knowledge of Identity and Access Management (IAM), Privileged Access Management (PAM), and secure access control mechanisms.

Preferred Qualifications:

· Knowledge of Identity and Access Management (IAM), Privileged Access Management (PAM), CyberArk, and data security solutions such as Varonis, Guardium, and Symantec.

· Experience with network security technologies, including firewalls, Web Application Firewalls (WAF), Anti-DDoS, and network connectivity protocols.

· Knowledge of cloud security, Docker, Kubernetes, encryption, key management, OAuth, Single Sign-On (SSO), and API security.

· Familiarity with Linux, AIX, Windows, AS400, Oracle, MSSQL, PostgreSQL, and MongoDB.

· Relevant certifications such as CISSP, CISA, CISM, CEH, CHFI, ISO 27001, or SANS Institute certifications; Python scripting and Power BI reporting skills are advantageous.

Application Method

Apply on LinkedIn or email your resume to: [HIDDEN TEXT]