Prep.Study - Cyber Security Analyst - Vulnerability Management (7-10 yrs)

Position Overview :

We are seeking a highly skilled Cyber Security Expert with 7-10 years of experience in safeguarding an organization's IT systems, networks, and data from cyber threats. The ideal candidate will have deep expertise in identifying vulnerabilities, implementing robust security measures, and proactively monitoring for potential breaches. The individual should be capable of working independently and providing detailed reports and recommendations directly to management.

Key Responsibilities :

1. Risk Assessment and Vulnerability Management :

- Conduct regular assessments to identify vulnerabilities in systems, networks, and applications.

- Develop and implement strategies to mitigate risks and enhance the organization's overall security posture.

- Perform penetration testing and security audits to validate system resilience.

2. Design and Implementation of Security Measures :

- Design and deploy security solutions, including firewalls, intrusion detection systems, endpoint protection, and encryption protocols.

- Ensure adherence to industry best practices and compliance standards such as ISO 27001, GDPR, or NIST.

- Develop and maintain secure configurations for hardware and software.

3. Threat Monitoring and Incident Response :

- Monitor systems for suspicious activities, potential breaches, or anomalies using SIEM tools and other monitoring solutions.

- Respond promptly to security incidents, conduct forensic investigations, and develop mitigation strategies.

- Maintain an incident response plan and conduct regular drills to ensure readiness.

4. Policy Development and Compliance :

- Draft, implement, and enforce IT security policies and procedures.

- Ensure compliance with relevant regulatory and legal requirements.

- Conduct employee training programs to promote cybersecurity awareness across the organization.

5. Collaboration and Reporting :

- Collaborate with IT teams, business units, and third-party vendors to address security requirements.

- Provide regular updates to management, including detailed reports on security risks, incidents, and recommended improvements.

- Serve as a trusted advisor to the organization's leadership on cybersecurity matters.

Required Skills and Qualifications :

- Qualification : Bachelor's degree in Technology / Computer Science or equivalent.

- Experience :

- 7-10 years of proven experience in cybersecurity, IT security, or a related field.

- Hands-on experience in implementing and managing security technologies and frameworks.

Technical Expertise :

- Proficiency in security tools and technologies, including firewalls, VPNs, IDS/IPS, antivirus, and encryption solutions.

- Expertise in penetration testing, ethical hacking, and vulnerability scanning tools like Metasploit, Nessus, or Burp Suite.

- Knowledge of operating systems (Windows, Linux, macOS) and cloud security (AWS, Azure, or Google Cloud).

Certifications (Preferred) :

- Certified Information Systems Security Professional (CISSP)

- Certified Ethical Hacker (CEH)

- Certified Information Security Manager (CISM)

- CompTIA Security+ or other equivalent certifications

Soft Skills :

- Strong analytical and problem-solving skills to address complex security challenges.

- Excellent communication and presentation skills for conveying technical concepts to non-technical stakeholders.

- Ability to work independently and manage multiple tasks simultaneously.

Preferred Qualifications :

- Experience in securing DevSecOps and CI/CD pipelines.

- Knowledge of emerging threats, such as ransomware, APTs, and zero-day exploits.

- Familiarity with Artificial Intelligence and Machine Learning applications in cybersecurity.

Location and Work Environment :

- Based in Mumbai, with options for remote or hybrid work arrangements.

- A collaborative and forward-thinking environment with access to cutting-edge tools and technologies.

Why Join Us?

- Play a pivotal role in protecting the organization from evolving cyber threats.

- Work in a dynamic environment that values innovation and proactive security strategies.

- Opportunity to grow professionally while contributing to the organization's security resilience.