Archives: Jobs

Job Description:

• Responsible for implementation of ISO 27001, ISO 27701 and ISO 22301.
• Co-ordination with internal and external stakeholders, identifying gaps and remediation.
• Ensure audit readiness and successful audits for all the required certifications.
• Ensure adherence to customer requirements and any regulatory / statutory requirements.
• Assist in NIST – CSF and any other initiatives such as SOC 1 and 2 etc.

Skills required:

• 6 to 8 years of experience in implementation of standards such as ISO 27001, ISO 27701 and ISO 22301.
• Candidate should have core competency in Information Security, Governance, Risk and Compliance domains with hands on experience in ISMS Implementation and audits.
• Experience in compliance documentation related to Policies, Procedures.

Candidate should be able to work independently, project management skill is a plus.  

Following experience is desirable:

• Knowledge / experience in NIST -CSF, SOC 1 and 2, IT security management processes and industry frameworks.
• Knowledge of regulatory and compliance frameworks such as PCI-DSS, HIPAA, FIMA and HITECH a plus.
• Knowledge in cutting edge technologies in IT.

Experience:

• Minimum 5 years of working experience in Cyber Security Consulting or Advisory in Risk Assessment, BCP/DR, Data Privacy.
• Minium 5 years of hands-on experience in IoT and OT security consulting and Advisory in Risk Assessment.
• Successfully delivered at least 2 (two) Cyber Security consulting projects as consultant in recent years (2 years).
• Good understanding on the Purdue model, PLC, SCADA, ICS, ISA/IEC 62443, COBIT and ISO 27001, NIST, PCI-DSS standards

Education & Certification:

Bachelor's degree is required.

Preferred Certification (VALID):

• CRISC
• ISA/IEC 62443
• GRID
• GICSP
• CISSP
• Cisco CCENT/CCNA

 Responsibilities

Below will be the scope of the role.

• Assess security architecture.
• Risk assessment, analysis, and recommendation.
• Auditing.
• Business impact & privacy analysis.
• Security compliance, governance audits
• ICS/OT environment Compliance assessment
• Prepare security policy, framework, guidelines.
• Advisor to Senior Management on Business Continuity, Risk Management program
• Technical documentation.
• Prepare remediation plan and execution of plan.

Knowledge and Skills

• General understanding of Cyber security frameworks and standards such as ISO, NIST CSF, CIS, and MITRE ATT&CK, OWASP 10, SANS 25.
• Moderate to High level understanding of IT-OT convergence, Purdue Model, IDMZ concepts, network technologies, systems, and concepts.
• Good knowledge of industrial communication protocols and technologies from main vendors.
• Hands on experience on anomaly detection tools in the ICS/OT environment.
• Good skill on correlation of data and remediation of any misconfigurations.
• Knowledge of OT asset & vulnerability management. Work with OT asset owners to remediate asset or vulnerability issues.
• hands-on experience and knowledge of ICS / SCADA System Security (design, controls)
  Experience on OT monitoring technologies
• Hands on experience on Wireshark PCAPs, IDS, IPS
• Experience in troubleshooting industrial protocols such as OPC, Modbus TCP, HART etc
• Experience in incident handling and response system SIEM & SOAR
• Cloud Security Trust, Assurance & Governance
• Audit Automation
• Service Organization Control (SOC1, SOC2) Audit & Compliance
• Software Security Framework (e.g., BSSIM, OWASP SAMM)
• Excellent written & verbal communication and analytical skills.
• Good documentation skills.
• Good problem-solving skills.

Candidate selection guide for screening:

• Priority1: Primary skill as IoT/OT secondary skills are IT Risk Management, Compliance Management, BCP/DR

• Identity & Access Management (IAM), Privilege Access Management (PIM/PAM), Database Activity Monitoring (DAM) (e.g., Beyond Trust, CyberArk, Sailpoint, Iraje, Imperva etc.)
• O365 security, Microsoft defender
• Cloud Infrastructure Security (AWS, Azure, GCP)
• Certificate Lifecycle Management (CLM, CLMS), Public Key Infrastructure (PKI), Hardware Security Module (HSM). (e.g., Thales, Venafi)
• Breach & Attack Simulation (BAS) (e.g., SafeBreach)
• Knowledge Zero Trust Network Access, Secure Access Service Edge (e.g. Zscaler, Cato Networks, Aruba)                     

Description of Role:
The Security Consultant should have a strong understanding of the emerging security practices and standards. Should be able to consult, engineer and apply security best practices while designing and proposing solutions to our enterprise customers. Should be able to conduct system security, vulnerability analysis and risk assessment, identify security gaps, identify integration issues, study architecture/platform and design security architecture. 
An Infrastructure Security Consultant undertakes complex work of a high-risk level, often working on several projects. In this role, you will:
• Interact with senior stakeholders across departments.
• Understand, decision making, balancing requirements, and deciding between approaches.
• Produce patterns and support quality assurance.
• Be the point of escalation for architects.
Experience:
• Minimum 5 years of working experience in Cyber Security Consulting or Advisory.
• Successfully delivered at-least 2 (two) Cyber Security consulting and implementation projects as consultant/Architect in recent years (2 years).
Certification (Preferred): 
• Valid OEM certification on security products (e.g., Palo Alto, McAfee, TrendMicro etc or related to relevant required skills.) - Specialty

Platform Admin JD

• Platform Admin role with must skill as Documentum installation/upgrade experience
• Good to have skills: CI/CD , Linux/Windows, DFC

Job description

We are seeking a highly skilled and experienced Test Lead with 8-14 years of expertise to join our dynamic team. As a Test Lead, you will be responsible for overseeing the testing process from start to finish, ensuring the delivery of high-quality products. The ideal candidate will possess a strong background in test strategy, planning, and execution, with a good understanding of automation testing. Additionally, holding CSM/PMP certification and excellent interpersonal skills to manage the Scrum for product development are essential for this role.

Responsibilities:

• Develop and implement comprehensive test strategies and plans for projects, ensuring alignment with project goals and objectives.
• Design, create, and maintain detailed test cases, test scenarios, and test data to verify software functionality, performance, and security.
• Lead and coordinate the testing team, providing guidance and mentoring to team members while fostering a collaborative work environment.
• Conduct test execution, identifying and documenting defects, and working closely with developers to ensure timely resolution.
• Participate in Agile/Scrum ceremonies, effectively lead & manage the Scrum process for all teams. · Implement and oversee automation testing frameworks to improve testing efficiency and effectiveness.
• Collaborate with cross-functional teams, including developers, product managers, and business stakeholders, to ensure clear communication and alignment throughout the testing process.
• Assertive involvement in the QA plan process for production roadmap to test planning execution to continuous product quality improvement and also performed Root Cause Analysis for serious flaws, and timely reporting.
• Monitor and report on testing progress, quality metrics, and any potential risks or issues.
• Continuously improve testing processes and methodologies to enhance product quality and team productivity.
• Stay updated with industry trends and best practices, incorporating them into the testing process.

Requirements:

• Bachelor’s degree in computer science, Engineering, or a related field.
• Proven experience as a Test Lead with 8-14 years of testing and quality assurance experience in software development.
• Strong expertise in test strategy development, test planning, and test execution.
• Good understanding of automation testing frameworks and tools.
• CSM/PMP certification is mandatory.
• Proficiency in Agile/Scrum methodologies and experience in leading Scrum processes.
• Excellent analytical and problem-solving skills with a keen eye for detail.
• Exceptional interpersonal and communication skills, capable of effectively collaborating with diverse teams.
• Ability to thrive in a fast-paced, dynamic environment and adapt to changing priorities.
• Strong leadership and mentoring abilities to guide and motivate the testing team.

Good experience in ASP.NET MVC, C# and Web API

Relevant programming experience, hands-on experience in .Net Technologies

Should be good in SQL Server programming.

Good problem-solving approach

Good verbal and written communication

Good team handling skills;

working collaboratively with team members.