Cyber Security Analyst - IT Infrastructure (7-8 yrs)

We are looking for a skilled Cyber Security Analyst to join our team.

As a Cyber Security Analyst, you will play a critical role in safeguarding the company's IT infrastructure and ensuring compliance with industry standards for information security.

You will be responsible for overseeing network security, monitoring potential threats, conducting audits, and ensuring that security systems and protocols are effectively implemented and maintained.

Key Responsibilities :

- Oversee the security of the organization's network infrastructure, including firewalls, web application firewalls (WAF), and load balancers.

- Manage and configure Fortinet Firewalls, Array Load Balancer, and Array WAF to ensure optimal security performance.

- Implement security measures to protect the organization's servers, storage, and network from unauthorized access, cyber-attacks, and data breaches.

- Continuously monitor security logs generated by IT components (e.g , Network, Servers, OS, Storage) to identify potential security breaches or unusual activity.

- Use Arcsight SIEM for centralized monitoring and detection of security events and threats across the infrastructure.

- Review and analyze security alerts from OEMs and verify their impact on current equipment posture.

- Respond to and manage security incidents by conducting root-cause analysis and documenting findings.

- Collaborate with external vendors and stakeholders to address and mitigate identified security incidents or vulnerabilities.

- Report security incidents, findings, and resolutions to the Project Director and other key stakeholders.

- Conduct periodic audits of network equipment, server operating systems, and other IT assets to identify vulnerabilities or misconfigurations.

- Plan, test, and implement security updates, patches, and fixes for critical security issues in the data center (DC) components.

- Oversee the rollout of security patches across systems and ensure proper testing prior to implementation.

- Provide guidance and security best practices to team members and internal stakeholders regarding their specific areas of responsibility.

- Collaborate with other teams to ensure compliance with security standards and industry regulations.

- Ensure that all security processes and policies comply with relevant regulatory frameworks such as GDPR, ISO 27001, NIST, etc.

- Assist with audits and prepare documentation related to security management for internal and external audits.

- Regularly review and update security procedures to stay aligned with industry standards and organizational goals.

- Engage with Original Equipment Manufacturers (OEMs) for any security incidents, patches, or updates related to security products.

- Follow up with OEMs on any security issues and ensure timely resolution and updates.

- Continuously evaluate and improve the organization's security posture by staying up-to-date with the latest security threats, trends, and technologies.

- Participate in training and development programs to enhance personal expertise and contribute to the development of the team.

- 7+ years of hands-on experience in information security and IT security management.

- Extensive experience in the configuration, management, and troubleshooting of Fortinet Firewalls, Array WAF, and Load Balancers.

- Strong background in security monitoring, auditing, and incident response using tools like Arcsight SIEM and Trend Micro NIPS (Network Intrusion Prevention Systems).

- Experience with DDoS mitigation strategies and tools.

- Strong knowledge of network security protocols and technologies, including firewalls, VPNs, and secure access methods.

- Proficiency in security best practices for data protection, encryption, and vulnerability management.

- Hands-on experience with NIPS (Network Intrusion Prevention Systems) for proactive threat detection.

- Expertise in security patch management and regular updates for network and server systems.

- Familiarity with DDoS (Distributed Denial of Service) protection and mitigation strategies