About the Company
This role is for a prestigious Data Center client of The Stimulators, a leading Pan Asian hybrid, hyperscale, and edge solutions provider with assets located across APAC in SEA regions. They provide colocation, Enterprise Services, private cloud services, disaster recovery services, and interconnect solutions across cloud service providers, telcos, internet exchanges, and major data centers. They power digital transformations and sustainability as part of our core values to provide mission-critical infrastructure for Enterprise IT workloads.
About the Role
The Security lead will provide security incident response and readiness as part of a 24/7 Security Operations Centre within and in support of the IT Infrastructure and Operations team. Support global vulnerability management processes, including OS and infrastructure patching, hardening, and testing efforts. Operate security-related tools (HIDS, NIDS, IPS, Analyzers, Scanners, etc.) to identify active threats, attacks, vulnerabilities, exposures, etc., and prioritize activity within the team. Assist in the speedy identification of mitigation/remediation solutions.
Major Responsibilities:
Security Incident Response:
- Provide timely and effective security incident response within a 24x7 SOC environment.
- Lead operation teams to effectively maintain the lifecycle of both on-premises and cloud-based security solutions.
- Manage response to security and operational incidents, and ongoing security requests.
- Coordinate and manage security incidents to ensure swift identification, containment, and remediation.
- Develop and maintain incident response playbooks and procedures.
- Participate and contribute to industry cyber forums, both formal and informal.
- Support all audit and review requests.
- Monitor developments in the information security industry and communicate on the potential impact or applicability to the organization
Vulnerability Management:
- Support global vulnerability management processes, including operating system (OS) and infrastructure patching, hardening, and testing efforts.
- Conduct regular vulnerability assessments (VAPT) and prioritize remediation activities.
- Collaborate with IT teams to implement and validate security patches and updates.
Security Tools Operation:
- Manage the Total Cost of Ownership (TCO) for security solutions, which includes new investments and business-as-usual financials.
- Operate and manage various security tools including Host Intrusion Detection Systems (HIDS), Network Intrusion Detection Systems (NIDS), Intrusion Prevention Systems (IPS), analyzers, scanners, and more.
- Continuously monitor and analyze security tools to identify active threats, attacks, vulnerabilities, and exposures.
- Prioritize identified threats and vulnerabilities for remediation activities within the team.
Threat and Vulnerability Identification:
- Assist in the identification and evaluation of security threats and vulnerabilities.
- Conduct in-depth analysis of security events to determine the root cause and potential impact.
- Provide recommendations for mitigation and remediation solutions to address identified security issues.
Qualifications
- Bachelor's degree in computer science, information systems, cybersecurity, or a related field.
- At least 10 years of relevant experience in cybersecurity
- Knowledge of information technology operations (e.g., cloud, data, system, application and infrastructure, etc.)
- Knowledge of cybersecurity assessment (e.g. security audit, vulnerability assessment, penetration testing, etc.)
- Knowledge of cybersecurity products (e.g. End-Point Solution (EDR), WAF, DLP, SIEM, SOAR)
- Knowledge of market best practice and framework (e.g. ITIL, ISO, PCI-DSS, NIST, etc.)
- Certification in cybersecurity is an advantage (e.g. CISSP, CISM, CISA, ISO Lead Auditor, CEH, etc.)
- Certification in project management and framework is an advantage (e.g. PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.)Proven track record for managing technical resources to deliver the technology lifecycle
- Have relevant information security experience working with or for a global exchange or a global financial firm. Other IT operational experience will also be considered.
- Solid knowledge and experience in cloud technologies, and familiar with cloud security architecture, design, and operations.
- Relevant experience with SecDevOps principles, Security Automation, and Orchestration.
- Must have relevant experience with industry best-practice approaches to the design, implementation, operation, and management of IT systems (e.g., Agile, Waterfall, ITIL, COBIT)
- Must have relevant experience with information security (e.g., CISSP, CCSP).
- Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences. Strong written communication skills, experienced with writing board-level papers and verbal presentations to senior management.
- Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.
Pay range and compensation package:
- INR 30 LPA, including 10-15% variables
Essentials:
- Candidates with immediate availability or shorter notice periods are preferred.
- Job stability is a must in the profile.
- Working from the Office for 5 days a week is mandatory.
- Effectively communicate with customers of all levels (technical and non-technical)
- Ability to effectively prioritize workload in a fast-paced, frequently changing environment while remaining detailed and organized
- Strong interpersonal, written, verbal communication, and presentation skills, with the ability to interface effectively with individuals at various levels, both internally and externally
- Ability to work well under pressure while consistently meeting time-sensitive deadlines
- Analytical with strong problem-solving abilities and creative resolution skills
- Ability to work well independently, as well as effectively contribute to a team environment
- Ability to analyze data to create KPI
Equal Opportunity Statement
Our client is committed to diversity and inclusivity in its hiring practices.
