Security Architect (Junior , Mid -Level , Senior)
Duration: 2021-12-03 - 2021-12-31
Job position: Security Architect
InfySEC
No. 31, Lakeview Towers, 2nd Floor, Water Canal Road, Vetri Nagar, Korattur, Chennai - 600 080. Landmark: Near Alliance Apartment
Job Description
Education :
Bachelor’s or master’s degree in computer science, information systems, cybersecurity or a related field.
Security and Technical Experience :
The security architect should have direct, documented and verifiable experience with the following:
- Experience in using architecture methodologies such as SABSA, Zachman and TOGAF
- Direct, hands-on experience managing security infrastructure such as firewalls, IPSs, WAFs, endpoint protection, SIEM and log management technology
- Verifiable experience reviewing application code for security vulnerabilities
- Direct, hands-on experience using vulnerability management tools
- Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises on new applications and services
- Full-stack knowledge of IT infrastructure:
- Applications
- Databases
- Operating systems (Windows, UNIX and Linux)
- Hypervisors
- IP networks (WAN, LAN)
- Storage networks (Fibre Channel, iSCSI and network-attached storage)
- Backup networks and media
- Direct experience designing IAM technologies and services (e.g., Active Director, LDAP, Amazon Web Services’ [AWS’] IAM)
- Strong working knowledge of IT service management (e.g., ITIL-related disciplines):
- Change management
- Configuration management
- Asset management
- Incident management
- Problem management
- Experience designing the deployment of applications and infrastructure into public cloud services (e.g., AWS or Microsoft Azure)
Industry and Regulatory Experience :
The security architect is expected to have documented experience with the following:
Regulations, Standards and Frameworks :
- Payment Card Industry’s Data Security Standard (PCI-DSS)
- Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH)
- Validated Systems (e.g., Good Automated Manufacturing Practice [GAMP])
- Sarbanes-Oxley Act
- General Data Protection Regulation (GDPR)
- Privacy Principles (best practices)
- International Organization for Standardization (ISO) 27001/2
- National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)
- International Traffic in Arms Regulations (ITAR)
Industry, Market or Sector Experience :
- Manufacturing
- Automotive
Business-Related Skills :
The security architect at a midsize organization is expected to contribute his/her insights not only to colleagues within the security team and the CISO, but also to colleagues within IA, risk management and other line-of-business teams. To ensure that security-related matters are adequately conveyed, the following skills are required:
- Strategic planning skills — The security architect must interpret business, technology and threat drivers, and develop practical security roadmaps to deal with these drivers.
- Communication skills — The security architect will be required to translate complex security-related matters into business terms that are readily understood by the CISO and line-of-business colleagues. The security architect should anticipate presenting his or her analysis both in person and in written formats.
- Financial analysis — As part of the due diligence of security technologies, the security architect will be expected to evaluate the financial costs of recommended technologies. Specifically, the security architect will need to quantify purchasing and licensing options, estimate labor costs for a given service or technology, and estimate the total cost of operation or the ROI, or payback period for services or technologies that are replacing existing capabilities.
- Project management — Security services and technology implementations will require solid project management skills. The security architect will be expected to draft project plans for security service and technology deployments, and coordinate with stakeholders across the organization.
Required Certifications :
The security architect will evidence his or her knowledge of security and risk management through ongoing continuing professional education. The ideal candidate will maintain one or more of the following certifications.
- ISC2’s CISSP, ISACA’s CISM, ISACA’s CISA, The Open Group’s TOGAF, SANS’ GAIC, IAPP’s CIPT
Skill Required
Related Jobs
Senior Developer ( .Net Core & angular)
Senior Developer (.net Core & Angular)
ROLE AND RESPONSIBILITIES :
Looking for an ASP.NET Core Developer to be responsible for product design, development, and support. The responsibilities of ASP.NET Core Developers include writing code, designing solutions for applications, and
improving functionality for a product.
To be successful as an ASP.NET Core Developer, you should demonstrate excellent problem-solving skills, high-quality coding skills, and an ability to manage your time efficiently. Developer should have superior knowledge of software development, a keen eye for detail, and be able to work independently.
Senior Developer Responsibilities:
- Creating top-quality product development.
- Collaborating with front-end developers.
- Ensuring that junior developers deliver according to coding standards and best practices.
- Learn latest language and technology. Apply learning skills on the product development.
- Using the most updated and appropriate technologies.
- Designing and building application layers.
- Think of best solutions for development and research for the product.
- Degree in Computer Science, Information Technology, or similar.
- Minimum 5+ years of experience in ASP.NET development.
- Experience in developing applications using JavaScript framework like ReactJS or Angular
- Front end development using Bootstrap, font awesome or Material framework
- Extensive working knowledge of coding using .NET languages (C# & .NET).
- Familiarity with ASP.NET framework and SQL servers.
- Working experience in Azure functions / Micro services architecture
- Strong communication skills.
- Working knowledge in SharePoint, Azure Cloud
Pentester
VA PT
infySEC needs 4-8 yrs candidates for its client in Noida location, currently its remote working.
Will be responsible for application pen testing using BurpSuite and tools sets provided under Kali Linux, Pen Tester should be able to test Web Based as well as thick client and be able to document findings in Pen Test Reports and knowledge of CVSS for scoring vulnerabilities.
Skills & Experience
- OSCP/CPENT certified
- Expertise in pen testing of Web Applications
- Expertise in pen testing of Thick Clients
- Dynamic Scan and Triage false positives of flags from tools
- Planning Pen Testing and coverage
- VAPT report writing
- Manual Pen testing using Postman/Extensions and etc
- Expertise on Security Tools:
- Burp Suite Professional or Enterprise
- Kali Linux and tools available in Kali Linux such NMAP, SQLMAP and etc
- Pentesting
- Kali Linux
- Burpsuit proxy tool
- sqlmap
Network Security Engineer
Network Engineer
- Establish the networking environment by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards
- design and implement new solutions and improve the resilience of the current environment
- maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, and collaborating with network architects on network optimization
- undertake data network fault investigations in local and wide-area environments using information from multiple sources
- secure network systems by establishing and enforcing policies, and defining and monitoring access
- support and administer firewall environments in line with IT security policy
- report network operational status by gathering and prioritising information and managing projects
- upgrade data network equipment to the latest stable firmware releases
- configure routing and switching equipment, hosted IP voice services and firewalls
- provide remote support to on-site engineers and end users/customers during installation
- provide remote troubleshooting and fault finding if issues occur upon initial installation
- undertake capacity management and audit of IP addressing and hosted devices within data centers
- liaise with project management teams, third-line engineers, and service desk engineers on a regular basis
- speak to customers via email and phone for initial requirement capture.
- Must have hands-on experience on Azure & Active directory.
3 Months Cyber-Security Makeover Training - April 2022
Trainee
Highlights
- Internship duration: 3 Months
- Instructor Led Training : 3 hours per day
- Internet Access provided
- Software & others tools installation Guidance - provided
- Hardware support - provided (however expected to bring your own laptop)
- Internship Report creation / Project Report creation
- Minimum of 2 real time projects
- Internship Certificate will be issued upon 3 months internship completion
- Real-time project development and Technology Training by Industry experts
- Full practical training with 70% handson and 30% theory
- Hardware and software tools full support will be given
- Aptitude Training and Analytical Training – Placement support provided
- Will be engaged in real time client projects
- Full documentation and report analysis
- Industry exposure
- Enhancing / Training Corporate skills
- Table Tennis
- Playstation Games
- Gyming & Other fun activities
Who can apply :
- Those who are interested to upskills themselves in cyber security
- Those who are available to be come to our office and work for a period of 3 months full time
- Those who have relevant skills and interests
- Those who can start the part time job/internship between Oct 2021 to Nov 2021
- Those who are ready to dedicate themselves for 3 months for pure learning
- Those who have already graduated or are currently in any year of study
- Those who are from Chennai and neighboring cities
- Females willing to start/restart their career may also apply
| 1st Month |
|
| 2nd Month |
|
| 3rd Month |
|
Fees: 40,000 INR for 3 months (All access to labs will be provided)
Cybersecurity Internship Training, provides a practical exposure for the students on the latest and trending technologies. Below are some of the Top jobs in the IT Industry.
- Cyber Security Trainee
- DDOS Security Specialist
- Cyber Operations specialist
- Network Security engineer
- Telecommunications security trainee
- Ethical Hacking specialist
- IT Analyst – Vulnerability Management
- Ethical Hacking Application Developer
Career options for cyber security Interns :
- Financial Institutions
- IT and ITES companies
- All online businesses and organizations
- Consultancies
- Government
- Diplomatic set ups
- Security installations
- Security agencies
- Defense organizations
- Telecommunication sector
- Immigration services
- Aviation industry
- Forensic Laboratories
Duration of the course: 3 Months (9 AM to 5 PM, Except Sundays)
Reference : Why do a Cyber Security Internship ?
End of 3 months, excellent candidates with good communication will be placed at infysec or its client. ...