Security Administrator - Leading Bank - Aluva (Kerala)

Mandatory experience: Hands-on experience in information security operations, security administration, network security, endpoint security, SOC operations, vulnerability management or a closely related area.

Key Responsibilities:

1. Security Technology Administration

• Administer and maintain assigned security platforms, such as firewalls, IDS/IPS, web application firewall, secure web gateway or proxy, VPN, endpoint security, data loss prevention, privileged access management and security monitoring tools.
• Implement approved configuration changes, upgrades, patches, licence renewals and rule-base updates through the applicable change-management process.
• Review configurations and access privileges against approved security standards, baselines and the principle of least privilege.
• Maintain accurate inventories, architecture details, configuration records, rule review evidence and operating procedures for assigned security solutions.

2. Security Monitoring and Incident Support

• Review security alerts, logs and exception reports and coordinate investigation with the SOC, infrastructure, application and service-provider teams.
• Support incident triage, containment, eradication, recovery, evidence preservation and root-cause analysis as assigned.
• Track corrective actions arising from security incidents and confirm closure evidence.
• Participate in cyber incident response exercises, disaster recovery tests and resilience assessments.

3. Vulnerability and Security Assurance

• Coordinate vulnerability assessment and penetration testing activities for infrastructure, applications and security devices.
• Review findings, assign remediation actions to the relevant owners and monitor closure within defined timelines.
• Validate remediation through retesting or other approved evidence and escalate overdue or high-risk items.
• Support security hardening reviews and periodic control-effectiveness assessments.

4. Project, Audit and Governance Support

• Review security requirements for new systems, major changes, third-party integrations and technology projects.
• Provide technical evidence and clarifications for internal, external and regulatory audits.
• Support implementation of information security policies, standards and approved risk-treatment plans.
• Prepare accurate operational dashboards, exception reports and status updates for management review.