Security Specialist

Requirements

• 5+ Years of experience in working on Security aspects
• Must be proficient in understanding various aspects of Application Security in a cloud
• environment and should have worked on tightening the security at all levels.
• Ability to translate Information Security policies and procedures into language that a business and/or technical person can understand
• Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint, AWS Inspector, Kali Linux)
• Experience in Mobile Application testing including iOS and Android.
• Experience with web application vulnerability scanning tools (Burpsuite Pro, Veracode)
• Experience with network/infrastructure-level penetration testing
• Excellent communication skills to collaborate with both external and internal stakeholders to maintain the overall Information Security for KloudGin.
• Must have experience on AWS landscape and understanding of security aspects related to EC2, VPC, CloudFront, WAF, Shield, Secrets Manager, Inspector, CloudTrail, CloudWatch, Systems Manager, IAM, Config, etc.
• Should be aware of various CIS Benchmarks and be able to tighten the application and database servers based on the guidance.
• Experience in Application security and Mobile security Including OWASP technologies, vulnerability research and Mitigation.
• Awareness of CISSP certification will be a plus
• AWS Certification will be a plus
• Certification in any of these or similar certifications – CEH, ECSA, OSCP will be a plus.

Responsibilities

• To manage the Information Security Program and IT Operations at KloudGin.
• To perform web Application vulnerability scans leveraging both tools and manual checks.
• To use both DAST and SAST tools to identify the vulnerabilities and work with the developers to fix and remediate the same.
• To perform application security risk assessments.
• To conduct penetration testing using various tools and block the exposures in coordination with the development teams.
• To manage the Security features of KloudGin application and support the Presale team in responding to prospects about KloudGin infrastructure and security.
• To drive the Security Certification of the KloudGin product based on the above-mentioned security check based on the KloudGin releases.
• To drive the external Audits and Governance at KloudGin including VAPT, SOC Audits, GDPR Reviews.
• To drive and play the Project Manager role for the Disaster Recovery Drill of the application.
• Assess publicly and privately announced security vulnerabilities to determine the risk based on severity, threat likelihood and impact
• Conduct checks on server level vulnerabilities and adhere to CIS benchmarks for the environments.
• To perform log monitoring using SIEM tools and manage the threats or attacks on the application / network.
• Automation of Secrets management across the application and Environments.
• Continuously enhance the security of the application to meet the industry best practices.
• Review the latest threat in the industry and safeguard the application and environment against the same.
• Manage the Security Onboarding and Offboarding for the employees at KloudGin.
• Manage the IT Operations at KloudGin including end-point security and Antivirus management.