Cyber Security Engineer

Job Description: 

Roles and Responsibilities:
•Participate in incident reporting, digital forensics, malware analysis, and log correlation.
•Perform vulnerability management, application security assessments, and security audits for telecom and IT infrastructure.
•Support red teaming activities to assess and enhance the security posture of critical and sensitive infrastructure.
•Monitor and analyze network threats; coordinate incident triage and response across LSAs and agencies.
•Assist in securing network of Telecom-CSIRT Stakeholders.
•Analyze and monitoring of Telecom Security Operation Center (TSOC)
•Liaise with CERT-In, NCIIPC, CyMAC, NSCS, law enforcement, and other stakeholders for coordinated cybersecurity efforts.
•Contribute to the formulation of cybersecurity policies, incident management workflows, and reporting templates.
•Organize and participate in training and capacity-building initiatives for LSAs, young professionals, and service providers.
•Provide technical guidance and inputs during vendor selection, contract finalization, and technology procurement.
•Analyze cyber threat intelligence data, correlate threat information, and disseminate actionable intelligence.
•Conduct risk assessments and ensure compliance with Telecom Cyber Security Rules 2024 and other regulations.
•Continuously monitor the global threat landscape and recommend enhancements to the T-CSIRT framework and tools.
•Collaborate with cross-functional teams in a fast-paced environment to ensure robust cybersecurity posture.

Essential Qualifications:
BE/B.Tech. in Computer Science, Computer Engineering, Information Technology, Electronics, Electronics & Communication, Electronics & Telecommunications, or equivalent from a recognized university/institute, OR MCA.
•Minimum 3 years of hands-on experience in vulnerability management, application security, and information security audits.

Desirable Qualifications and Certifications:
•Certified Ethical Hacker (CEH), CompTIA Security+, CySA+, OSCP (Offensive Security Certified Professional), CISSP, CISM, or GIAC certifications (GCFA, GCIH).
•Experience in red teaming and securing critical infrastructure such as telecom, government, and banking sectors.
•Telecom/network-specific certifications like CCNA Security, CCNP Security.
•Certifications related to cyber threat intelligence analysis (e.g., Certified Threat Intelligence Analyst - CTIA).

Preferred Experience & Skills:
•Strong expertise in incident reporting, digital forensics, malware analysis, and log correlation.
•Proficiency with security tools such as Wireshark, Nessus, Splunk, ELK Stack, SIEM platforms, and forensic tools.
•Hands-on experience with TCP/IP, DNS, routing, firewalls, IDS/IPS, VPNs, and other network protocols.
•Knowledge of CERT-In guidelines, NCIIPC frameworks, national cybersecurity policies, and regulatory compliance.
•Experience in vulnerability assessment, penetration testing, and application security.
•Strong analytical and problem-solving skills with up-to-date awareness of emerging cyber threats and mitigation techniques.
•Familiarity with incident management frameworks and standard operating procedures.
•Capability to coordinate across multiple stakeholders and agencies.
•Excellent communication, collaboration, and training skills.
•Ability to work efficiently under pressure in a fast-paced operational environment.
•Basic scripting/programming skills (Python, Bash) and familiarity with cloud security concepts (preferred for HQ roles).
•Leadership and mentoring ability (preferred for HQ roles).

Additional Requirements:
•Strong teamwork and situational awareness.
•Ability to adapt quickly and manage multiple priorities.
•Commitment to continuous learning and improvement.