Cyber Security

- Perform Security Assessment for Enterprise and SaaS IT assets.

- Gain understanding of the business process, application architecture, IT infrastructure and interaction with external entities.

- Work with business, application, and supplier teams to perform in-depth threat assessments by leveraging methods such as STRIDE, VAST, Attack Tree etc.

- Provide subject matter expertise in assessing potential security threats in the application architecture and evaluate security controls to mitigate threats.

- Assess the risk of identified threats by evaluating likelihood and impact, determine countermeasures and remediation.

- Apply Information Security Policy and industry security standards (E.g.: OWASP, NIST, CIS etc.,) and guide application teams to help build secure products.

- Follow security governance process for issue tracking and closure. Ensure that security improvement actions are evaluated, validated, and implemented as required.

- Leverage industry best practices to continually improve process maturity.

- Promote awareness of security issues among application teams and business teams through training and awareness programs.

- Stay updated through continuous learning of emerging technologies like LLM, ZTNA, LCNC etc.

- Bachelor’s degree in computer science, Cyber Security, or related field of study
- 3+ years of experience in Cyber Security or related fields of IT.
- Knowledge on Security Framework such as NIST CSF, ISO27001, OWASP Top-10 etc.
- Cyber security certifications like CISSP, OSCP, CEH, Pentest+ are highly desirable.