Senior Information Security Specialist

Role Description:

The role includes operation and management of complex information security systems, execution of installation, upgrade, and update processes for security infrastructure, leading information security initiatives, and driving the implementation of complex security solutions.

The position involves design and ongoing support of enterprise systems, close collaboration with development teams on organizational information security aspects, and development of automations.

Responsibilities also include identification and resolution of security incidents, end-to-end tracking until closure, leading the deployment of new information security systems including writing HLD and LLD documentation, and working closely with various IT teams and additional interfaces across the organization.

Requirements:

Proven experience in the field of Information Security in at least one of the following options:

• At least 5 years of experience within the last 7 years in a large organization (3,500 users or more).
• At least 5 years of experience within the last 5 years as an Information Security Integrator, specifically with Firewalls, WAF, and Secure Web Gateway solutions.
• At least 5 years of combined experience from the two options above within the last 5 years.

Knowledge and Experience in at Least 4 of the Following Areas:

• Deep experience and understanding in managing Web Application Firewall (WAF) environments, strong knowledge of web-based vulnerabilities, and guiding development teams on secure development practices.
• Experience in implementation and management of Endpoint Security and EDR solutions across thousands of endpoints.
• Experience operating Secure Web Gateways and Proxy systems for thousands of users, along with deep understanding of email protocols and Secure Mail Relay.
• Experience in system administration and system security hardening.
• Strong capabilities in in-depth investigation of information security incidents, including network-based analysis, static and dynamic analysis, usage of EDR, Sandbox tools, Windows/Linux process analysis, extraction of IOCs, and their implementation across security systems.
• Experience in securing IaaS services based on Azure and/or AWS.