Develop hardening standards and translate into tool recognized format. [Example : should aware regex writing skill and implement in Policy Compliance module in Qualys ]Knowledge of identifying true and false positive against to the hardening standardsPerform Vulnerability assessment & Policy Compliance using leading Vulnerability Scanning solutions like Qualys, Nessus etc.Experience in Cloud Agent, VMDRPerform false positive validation and ensure delivery of quality reports.Act as a technical SME to analyse the configuration compliance & underlying mechanism on the identification of compliance results.Provide technical advice and support on remediation to infrastructure / application support teams.Review findings and identify root causes for common issues and provide recommendations for sustainable improvements.Understand security policies, procedures and guidelines to all levels of management and staff.Communicate effectively orally and in writing and establish cooperative working relationships.Provide suggestion to improve vulnerability Management service based on current trends in information technology (Network, system security software and hardware).Act as line manager in the absence of team lead.People & TalentMinimum 4-6 years of experience in Information security and preferably in Banking and Financial services sectorIn-depth working experience on Operating System, Network devices such as routers, switches, firewalls, load balancers and proxy will be added advantage for the role.Bachelor Degree in Engineering, Computer Science / Information Technology or its equivalent.Industry certifications will be a plus e.g. CISSP, CCNA Security, CCIE, CCNP Security, CISA, CRISC and CISM.Strong knowledge and subject matter expertise in multiple areas within Information Security.Hands on skill and expertise in performing risk / threat assessments / risk consulting.Excellent written, oral communication and reporting skills.Provides technical leadership, expertise and direction working with district and college technical staff for design and implementation of information technology security systems.Develops strategy for propagating, maintaining, and measuring compliance against security policies, standards, and guidelines district-wide.Time management and organizational skillsAbility and desire to learn new skills quicklyPerforms other related duties as assigned.ROLE SPECIFIC TECHNICAL Skills And Competencies and Proficiency LevelsTechnical Competency Name :Proficiency LevelsKnowledge in industry hardening standards on operating systems, network devicesAdvancedQualys, RAPID7, Tanium COMPLY, NessusExpertStrong Linux Shell experience and Solid knowledge of programming languages is needed, Python etc.,CoreITIL ConceptsCoreKnowledge on latest vulnerabilities & threatsExpertHands on skill and expertise in performing risk / threat assessments / risk consultingCore(Please select target proficiency level)Policy Compliance, QualysSkills Required
Risk Assessment, Nessus, Regex, Qualys, Vulnerability Assessment, policy compliance