CSM SecDevOps - Analyst

To be successful as a CSM SecDevOps - Analyst you should have experience with:

• Understanding & experience on ITIL concepts.

• Basic knowledge of Automation, Java, GoLang.

• Experienced in cloud, code as infrastructure and policy as code technologies.

• Hands-on experience with microservice architecture, distributed consensus

• In-depth knowledge of PKI/SSL/TLS, encryption, design patterns and algorithms

• In-depth Knowledge Authentication and Authorization Protocols: JWT/OAUTH2

• In-depth knowledge of Cryptography Java (Java 8/11, Spring boot)

• Knowledge of relational and Document databases (MySql/Postgres)

• Hasicorp Vault, Hashicorp Consul.

• Build systems, CI/CD (Jenkins, TC), version control: git, Kubernetes/OpenShif

• Experience in Infra/Cluster Management, Linux & OpenShift environment, Customer Support, Incident Management, Troubleshooting and Deployment/Change Request process. Knowledge of Network, DevOps and SECDEVOPS concept, Application Security.

Some other highly valued skills may include:

• Incident, Problem and Change management

• Ensuring issues are managed within agreed SLA/SLT

• Manage email, Hotline queries and ticketing systems

• Support and management of system outages via the published major incident management process

• Perform post-release start-of-day checks as appropriate

• Liaison across business and users to resolve users support issues

• Efficient implementation of identity management privileged access provisioning

• Perform trending & root cause analysis of issues (management information)

• Compliance to audit, regulatory and GIS Standards requirements - risk aware and focused

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills.

This role is based in Pune.

Purpose of the role

To develop, implement and maintain solutions that support the safeguarding of the banks systems and sensitive information.

Accountabilities

• Provision of subject matter expertise on security systems and engineering patterns.
• Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.
• Management and protection of secrets, ensuring that they are securely generated, stored, and used.
• Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches.
• Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques.
• Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements.
• Development/ Implementation and maintenance of Identity and Access Management solutions and systems.

Analyst Expectations

• To perform prescribed activities in a timely manner and to a high standard consistently driving continuous improvement.
• Requires in-depth technical knowledge and experience in their assigned area of expertise
• Thorough understanding of the underlying principles and concepts within the area of expertise
• They lead and supervise a team, guiding and supporting professional development, allocating work requirements and coordinating team resources.
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others.
• OR for an individual contributor, they develop technical expertise in work area, acting as an advisor where appropriate.
• Will have an impact on the work of related teams within the area.
• Partner with other functions and business areas.
• Takes responsibility for end results of a team s operational processing and activities.
• Escalate breaches of policies / procedure appropriately.
• Take responsibility for embedding new policies/ procedures adopted due to risk mitigation.
• Advise and influence decision making within own area of expertise.
• Take ownership for managing risk and strengthening controls in relation to the work you own or contribute to. Deliver your work and areas of responsibility in line with relevant rules, regulation and codes of conduct.
• Maintain and continually build an understanding of how own sub-function integrates with function, alongside knowledge of the organisations products, services and processes within the function.
• Demonstrate understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Make evaluative judgements based on the analysis of factual information, paying attention to detail.
• Resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents.
• Guide and persuade team members and communicate complex / sensitive information.
• Act as contact point for stakeholders outside of the immediate function, while building a network of contacts outside team and external to the organisation.