Senior Security Analyst Jobs

Database analysts design, develop and administer data management solutions using database management software. Data administrators develop and implement data administration policy, standards and models. They are employed in information technology consulting firms and in information technology units throughout the private and public sectors.This group performs some or all of the following duties:Database analystsCollect and document user requirementsDesign and develop database architecture for information systems projectsDesign, construct, modify, integrate, implement and test data models and database management systemsConduct research and provide advice to other informatics professionals regarding the selection, application and implementation of database management toolsOperate database management systems to analyze data and perform data mining analysisMay lead, co-ordinate or supervise other workers in this group.Data administratorsDevelop and implement data administration policy, standards and modelsResearch and document data requirements, data collection and administration policy, data access rules and securityDevelop policies and procedures for network and/or Internet database access and usage and for the backup and recovery of dataConduct research and provide advice to other information systems professionals regarding the collection, availability, security and suitability of dataWrite scripts related to stored procedures and triggersMay lead and co-ordinate teams of data administrators in the development and implementation of data policies, standards and models.

Sr. Security Engineer IAM PAMWere seeking an experienced security engineer to work directly with our software, system engineer and application owner to ensure security of CFG. This role is for any highly motivated individual that can dynamically lead multiple projects while building and maintaining our Privileged Access Management (PAM) controls including but not limited to platforms and automated processes. In this role, you will demonstrate your senior level experience and be responsible for: Drive continuous improvement for the security of Identity and Access Management in CFG. Deliver timely guidance and robust PAM solutions to address IAM security needs. Review and lead the gathering of business, functional and technical requirements for establishing secure IAM environment. Build prototypes and proofs of concept to demonstrate feasibility for new, innovative security technologies. Facilitating the establishment and implementation of standards, processes, and documentation that guide the design of technology solutions including architecting and implementing solutions around privileged access management. Identifying opportunities for system process automation including technologies required; documenting and presenting ideas to management. Privileged Access Management Technologies and Methodologies with knowledge of building out PM environments from scratch a huge plus.Experience and Skills: Must have a minimum of 8+ years of IAM experience. Minimum of 5 years of experience in development/operational experience with CyberArk, HashiCorp, Centrify, Duo, including implementation, installation, configuration & administration of various components. 5 or more years experience of advanced knowledge in Windows, Active Directory/Entra ID Past experience with pushing technical initiatives, team, project or indirect management of security technologies. Hands on experience with authentication & authorization on infrastructure platforms.

Your Role and Responsibilities Work with the infrastructure team and provide expert advice on securing our use of Azure cloud and AWS services, Kubernetes and containers in particular, provide guidance and a level of oversight for Azure and AWS network security and Key Vault Encourage a shift-left approach to security Assist the Security Architect with securing our Data Platform, including our use of Databricks and synapse Collaborate with wider tech and security teams on the implementation and operation of a robust Customer Identity and Access Management (CIAM) service Document security processes and security tool low-level design/configuration; Contribute to the development of security service delivery and operation documentation Assist technology teams with integrating their systems and services with security services and tools Assist Security Operations with investigating cloud incidents Support the security and application security engineers and wider security team with their various responsibilities, including achieving and maintaining ISO 27001 Certification and threat modelling activities Skills & Experience: Professional certification such as AZ-500: Microsoft Azure Security, Microsoft Azure Architect Technologies, AWS Certified Security Specialty, AWS Certified Solutions Architect At least 8 years of experience in Security engineering roles At least 3 years of experience in AWS and Azure Cloud Security Practical experience with and exposure to, crafting and implementing security best practices within a Cloud deployment such as AWS Well Architected Framework and Azure Well-Architected Framework Strong background in security fundamentals in Linux, Networking and Cryptography Very good understanding of IAM Policies and cloud roles & responsibilities. Experience with Cloud Security Posture Management Platform/Cloud Workload Protection Platform such as Azure Security Centre, Checkpoint CloudGuard. Knowledge of MITRE ATT&CK

Job Responsibilities:6+ Years of work experience in the Cyber security domain. (Specifically Application Security/Pen testing).Should have good knowledge of Mobile, Web application pen testing and secure coding practices.Should have experience in leading a penetration testing team.Strong exposure and working knowledge of popular application security standards including OWASP top 10, SANS Top 25, etc.Knowledge of rating standards such as CVSS, DREAD, STRIDE, etc.Should have knowledge of Threat modeling.Good working knowledge of Open Source security solutions.Should be an out-of-the-box thinker and propose solutions to complex security problems.Good with any scripting languages.Should have good communication skills and mentoring skills.Should be a cyber sec enthusiast who will willing to explore areas other than Application security/Pen testingShould have the zeal to explore other areas of cyber security apart from Appsec as and when the opportunity arises.Mandatory Skills: VAPT, Appsec, Threat Modelling, Mobile AppsecAdditional Skils:Should have the zeal to explore other areas of cyber security apart from Appsec as and when the opportunity arises.

Needs a Candidate who has a experience in SIEM, Information Security, Risk and Complains.