Job Description:

· Strong expertise in cloud security, DNS, DDoS, IDS/IPS, email security, and email and web advance threat protection. Improving defence by examining email, DNS, and DDoS attack patterns. Monitoring baseline changes for external threat threats detection and automating preventive mitigation.

· DMARC and outgoing email enforcement specialist.

· Advanced expertise in SIEM (Security Information and Event Management) monitoring, such as Splunk. Email logs, IDS/IPS, NetFlow, and Packet Analysis expertise in log analysis

· Skilled in perimeter and cloud security with a strong grasp of current edge security trends and practices.

· Examining requests for adjustments to policy enforcement; speaking with submitters who have asked for security configuration changes and need additional requirement collection.

· It is highly advantageous to have knowledge of Agile, DevSecOps, Open Source, and a programming language.

Desired Skills:

· This role is a director-level position, which is both a leadership and highly technical role. We need a management-doer—someone who likes tracking down, identifying, and resolving cyber threats—who can also serve as a team leader, an instructor, and an analytical thinker for our business and customers.

Desired Profile:

· 17+ years of overall experience with 10+ years of security experience preferred, ideally in a corporate setting guided by a matrix.

· Proven expertise in email traffic analysis and troubleshooting

· A firm understanding of the fundamentals of networking, such as email, TCP/IP, DNS, HTTP, proxies, load-balancing, etc.

· Practical knowledge of log aggregation and analysis tools such as Splunk, SIEM, etc.

· Working knowledge of IaaS, PaaS, and SaaS settings, such as Amazon.

· Skill in effectively communicating technical information in business terms with management and executives as well as technical and non-technical workers.

· A working knowledge of network controls and procedures to thwart online threats.

· Knowledge of external security controls that might thwart potential external assaults

· An understanding of criminal activity and potential attacks in each layer of the OSI model.

· The capacity to assess the risks to information security using intelligence research.

· An understanding of cyber threats, the motivations of malicious cyber threat actors, and related capabilities.

Education and Certification

· Industry certifications in cyber security incident management, such as, Certified Information Systems Security Professional (CISSP), GIAC and other related credentials.

Location: Bangalore

Saaki, Argus & Averil Consulting

More Information