Engineer- IT Application Admin and Cyber Security

Engineer - IT Application Admin and Cyber Security

KSB Pumps Limited is looking for an Engineer - IT Application Admin and Cyber Security to bolster our cybersecurity defenses. This role is perfect for a professional with a firm IT security mindset and a dedication to proactive threat detection and response, ensuring the robust security of our applications and infrastructure.

Responsibilities:

• Conduct security monitoring, including SentinelOne incident response and security analytics.
• Perform proactive threat hunting and utilize threat intelligence platforms, incorporating Indicators of Compromise (IOC) and other threat intelligence (vulnerabilities, strategic, tactical, etc.).
• Implement User & Entity Behavioral Anomaly Detection and vulnerability scanning for threat detection.
• Monitor contemporary threats and develop response plans.
• Assess and monitor application security, and if feasible, coordinate with service providers for post-assessment application security monitoring.

Skills:

• Hands-on experience with security technologies, such as firewalls, IDS/IPS, SIEM, EDR, antivirus, and vulnerability scanning tools.
• Expertise with SentinelOne.
• Threat Modeling skills and a firm IT security mindset.
• Advanced knowledge of Windows Server, Windows Clients, and Linux Server.
• In-depth understanding of different types of security vulnerabilities (e.g., SQL injection, XSS, buffer overflow).
• Understanding of attack vectors.
• Familiarity with different network topologies and protocols such as TCP/IP, DNS, HTTP(S), SMTP, VLANs, VPNs, and routing/switching.
• Firm knowledge of technical details of SMTP / e-mail in general, and the ability to analyze e-mail headers to determine additional data such as real origin.
• Expert regarding the operation of Outlook & Exchange from a user's perspective.
• Firm grasp of phishing techniques and e-mail based attack patterns.
• Commitment to continuous learning.
• Familiarity with security-related regulations, such as GDPR, HIPAA, and PCI-DSS.
• Excellent verbal, written, and interpersonal communication skills, especially the ability to break down complex technical information for non-technical stakeholders and articulate the impact of security design flaws, attack surfaces, and vulnerabilities.

Qualifications:

• Preferable (Nice to have) skill: Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications.