Cybersecurity Compliance Engineer

Solution Architect ASRB Security Engineer

Location : Hyderabad

Experience : 5=10 years

Immediate joiners Preferred.

Kindly share profile to radhika.upadhyay1@genpact.com with Sub of "ASRB Security Engineer" along with notice period.

An ASRB is a governing organization that examines and confirms compliance for hardware and software projects, both new and updated. The aim of the ASRB is to convey business requirements to interested parties and encourage uniform technology stacks and designs among cloud initiatives.

Responsibilities :

• Experience in managing the Security Architecture engagement review request.
• Work directly with application teams and solution architects to review proposed architectures to ensure alignment with approved design patterns and security control requirements.
• Recommend and / or approve designs and / or platform services which align with defined best practices. Provide list of security recommendations to the application team based on the architecture / security review checklist provided.
• Prepare Architecture & Security Review Board (ASRB) and / or Architecture Design Review (ADR) artifacts ensuring inclusion of necessary project information and architectural diagrams sufficient to disposition the design proposal, working collaboratively with the application team and solution architect.
• Hosting and / or supporting Cyber in these meetings with an intent, to strategically assess project proposals containing network, cloud platform / services and application architecture, with a purpose of identifying and highlighting both cyber risk and compliance control gaps that the project teams will then have to remediate prior to project go-live.
• Document security gaps or non-compliant patterns / components (i.E., ports / protocols / services / integrations) and track these to closure with the application teams.
• Develop and Maintain Security Standards for Azure / AWS Cloud Services
• Cloud Security Configuration and management, rules creation and configuration
• Good years of experience in Infrastructure Security and Operations
• Good years of experience in Securing AWS Cloud
• Mandatory knowledge off foundation Cloud Services Compute, Database, Network, Security Groups, Network Access List (NACL), Firewall rules and Storage.
• Understand threat modelling of applications.
• Knowledge of AZURE AND AWS products and services : EKS, S3, SQS, SNS, Cloud Watch, Elastic Cache, Kinesis, Cloud Trail, KMS, WAF, Guard Duty, IAM, Lambda, Connect, RDS
• Knowledge of AZURE AND AWS products and services : AZURE AND AWS AD, VM, BLOB, Key Vault, Log Analytics, Monitor, AZURE AND AWS Databases (SQL, PostgreSQL, MySQL), Key Vault, Security Center, Activity log
• Security certifications from AWS / Azure.
• Understand latest trends.
• Understand top key risks.
• Have Strong Knowledge in Networking in Cloud.
• Strong communication and written skills
• Experience creating technical documentation.
• Hands on experience Securing solutions on Azure / AWS
• Knowledge of security controls for the public cloud
• Knowledge of Industry Security standards (HIPPA, SOX, PCI-DSS)
• Knowledge of Compliance standards (NIST, CIS)
• Securing Linux and Windows OS
• Experience with Open-Source Cloud and configuration management tools (Terraform Ansible, etc.)
• Experience with alternate cloud providers (e.G. AWS)