The candidate is expected to support and manage various Cyber Security tools, drive security-related projects and recommend process improvements. Additionally, they are responsible for following up on remediation actions and security assessments with relevant stakeholders and application teams.
The ideal candidate should have a strong understanding of Cyber Security Tools, technical expertise in security vulnerabilities and risk assessments, and hands-on experience with at least three specified security tools (Exabeam, CarbonBlack and Tripwire). Familiarity with task automation scripting and security testing in API, container, and cloud environments would be advantageous.
Roles and Responsibilities:
- Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA
- Managing designated vendors for the specified Security tools
- Driving the scheduling of security-related projects and remediation timelines
- Maintaining, troubleshooting, patching, and updating various security tools and scanners used in the otganization
- Recommending process re-engineering and streamlining to enhance workflows and efficiencies
- Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps
- Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams
- Conducting daily health check and validating system availability through various monitoring/checks
- Implementing of the service requests, change requests and support of incident management
- Fine tuning of rules, updating of contents packs to suit the different use cases in the environment where applicable
- Supporting audits through reviewing logs/activities and user account review
Requisites:
- Strong background in cyber security monitoring, vulnerability assessments and infrastructure security
- Understanding of the principles and objectives of various Cyber Security Tools
- Technical expertise in security vulnerabilities, validation of remediations, and risk assessments
- Admin level experience on Splunk - good to have few implementation experiences
- CISSP, CEH and other security certifications will be taken into consideration
- Hands-on experience in operating and maintaining at least three (3) of the following security tools: Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA
- Strong with scripting for task automation using Ansible, PowerShell, or Python
- Experience with security testing on API, container, and cloud environments