Analyst - Information Security

Analyst - Information Security

• Working knowledge of secure application architectures, encryption technologies, cryptography and key management, authentication, and access control mechanisms. • Knowledge of the common application layer vulnerabilities and the ability to articulate the risks to project teams. • Knowledge of tiered application architectures, web applications, APIs, mobile application security and data integration techniques • Should have good understanding of OWASP Top 10 vulnerabilities and Application Security Verification Standard. • Knowledge on identity and access management process & principles and its related technologies. • Knowledge of various cloud environments, cloud security stack and cloud deployment models (Saas, PaaS and IaaS) • Able to evaluate delivery of security offerings related to cloud security and recommend appropriate controls based on the offering. • Working experience on Amazon Web Services, Azure, or any other cloud service provider(s). • Understanding of services and security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring and data protection. 1. Work closely with the IT and project teams in getting a thorough understanding on the requirement on both network and cloud front, review from the security standpoint and recommend relevant solutions. 2. Responsible for effective coordination and prompt & proactive communication with the relevant teams involved in the requirements. 3. Contribute to the group in identifying the redundant requirements and put forward the thoughts to automate the same. 4. Evaluate outsourced/third-party technologies and hosting environments to ensure they provide adequate protection for the processing, transmission, and storage of company/clients information.