IT Security System Administrator I Full Time NEW

• Ability to perform VAPT on IT Applications using various open source and commercial tools like Burp suite/ZAP/CSRF Tester etc.
• Provide assessment reports that are easily understandable by the target audiences.
• Analyze scan reports and suggest remediation / mitigation plan.
• Keep track of latest vulnerabilities.
• Require deep understanding of IT Application security protocols and its implementation.
• Maintain good verbal communication skills; communicate effectively with technical and non-technical colleagues at all levels in the organization.
• A flexible approach to working on a rotational basis and provide necessary cover where needed.
• Work within the relevant legislation, policies, and procedures.
• Ability to perform complex troubleshooting of security vulnerabilities.
• OSCP, ECSA, LPT Master, GPEN or any other industry accredited security certifications
• Exposure to OWASP top 10 Knowledge on SDLC and Application Architecture.
• Knowledge on Network Security.
• Knowledge of scripting languages (Java, dot net, python etc.)
• Broad background of networks, operating systems (windows, UNIX, Linux), firewalls and security engineering concepts.
• Penetration testing planning, analyzing, remediation recommendations, and dashboarding.
• Expertise with web application vulnerability scanners (Acunetix /HP Web Inspect/IBM AppScan etc. and with source code analysis tools (Fortify/Checkmarx/Vera code/Klocworks).
• Provide remediation guidance to identified vulnerabilities.
• Implementing the DR testing and publishing the remediation and action plan.
• Managing the Statutory and Internal Auditors on Application Security
• Report to chief Security office and managing the Risk review meeting.
• Assess applicable policy, standards, and controls, indirectly manage security technologies, and direct the establishment and implementation of policies and procedures.Monitor information security trends and keep technology leadership informed about information security -related issues and activities potentially affecting the organization.
• Ensure appropriate business continuity process is followed for infrastructure and applications in accordance with business need, guidelines, policies, and procedures.
• Expertise with Identity and Access Management on the Application.
• Bachelor of Science in Computer Science or a related field.

4+ years in Information Security (VAPT) experience required.

This is a summary of the primary accountabilities and requirements for this position. The company reserves the right to modify or amend accountabilities and requirements at any time at its sole discretion based on business needs. Any part of this job description is subject to possible modification to reasonably accommodate individuals with disabilities