Engineer - IT Application Admin and Cyber Security

KSB Pumps Limited is looking for an Engineer - IT Application Admin and Cyber Security to bolster our cybersecurity defenses. This role is perfect for a professional with a firm IT security mindset and a dedication to proactive threat detection and response, ensuring the robust security of our applications and infrastructure.

Responsibilities:

Conduct security monitoring, including SentinelOne incident response and security analytics.
Perform proactive threat hunting and utilize threat intelligence platforms, incorporating Indicators of Compromise (IOC) and other threat intelligence (vulnerabilities, strategic, tactical, etc.).
Implement User & Entity Behavioral Anomaly Detection and vulnerability scanning for threat detection.
Monitor contemporary threats and develop response plans.
Assess and monitor application security, and if feasible, coordinate with service providers for post-assessment application security monitoring.

Skills:

Hands-on experience with security technologies, such as firewalls, IDS/IPS, SIEM, EDR, antivirus, and vulnerability scanning tools.
Expertise with SentinelOne.
Threat Modeling skills and a firm IT security mindset.
Advanced knowledge of Windows Server, Windows Clients, and Linux Server.
In-depth understanding of different types of security vulnerabilities (e.g., SQL injection, XSS, buffer overflow).
Understanding of attack vectors.
Familiarity with different network topologies and protocols such as TCP/IP, DNS, HTTP(S), SMTP, VLANs, VPNs, and routing/switching.
Firm knowledge of technical details of SMTP / e-mail in general, and the ability to analyze e-mail headers to determine additional data such as real origin.
Expert regarding the operation of Outlook & Exchange from a user's perspective.
Firm grasp of phishing techniques and e-mail based attack patterns.
Commitment to continuous learning.
Familiarity with security-related regulations, such as GDPR, HIPAA, and PCI-DSS.
Excellent verbal, written, and interpersonal communication skills, especially the ability to break down complex technical information for non-technical stakeholders and articulate the impact of security design flaws, attack surfaces, and vulnerabilities.

Qualifications:

Preferable (Nice to have) skill: Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications.

Engineer- IT Application Admin and Cyber Security