Job Summary:
We are seeking a seasoned Cyber security Lead to work on the Application risk assessment and
operational security in our both traditional and private cloud infrastructure and applications.
The successful candidate will perform risk assessment, security validation and exceptions,
review security incidents, different level of risk assessments, driving security programs and
follow the remediation with close Governance.
Responsibilities:
- Conduct risk assessments and security evaluations of private cloud control plane services (API Services) & and On-Prem application/infrastructure
- Identify and assess threats, vulnerabilities, risks and potential attack vectors and prioritize the mitigation
- Assess and manage IT risk treatment in all new projects or infrastructure within its scope (integration of security into projects, secure by design processes)
- Enforce Group policies / standards and/or procedures / good security practices within its department.
- Develop and implement risk mitigation strategies and security controls
- Drive security program such as Pen test and Vulnerability programs globally
- Evaluate security configurations, policies, and procedures
- Perform security validations and exceptions for different need on day to day basis (AV , Browsing exceptions, RAF,admin rights, firewall flow, secureshare access etc.);
- Assess compliance with industry standards and regulatory requirements (e.g., NIST, SOC 2, PCI-DSS, OWASP)
- Develop and maintain risk management frameworks, playbooks, and reporting dashboards
- Communicate risk and security recommendations to stakeholders
- Contribute to security audits (internal audit / regulators) within its scope
- Ensure proper work distribution between team members and help team members as and when required
- To act as a security expert and point of contact on all the operational security and risk management activities
- Lead the resolution of security incidents and contribute to the post-mortem investigation of security incidents
- Lead the remediation of critical vulnerabilities in coordination with technical teams, SOC and CERT.
- Monitor and coordinate for timely closure of audit recommendations (internal / regulators), if necessary, intervene in support of operational teams.
- Communicate the status of security audits (internal audit / regulators) as well as the plans for dealing with recommendations.
- Communicate on its activities (definition of relevant KPIs/KRIs) and on security alert points.
Profile
Profile Required:
- 8+ years of experience in application risk assessment, operational security and risk management or related fields
- Strong understanding of infrastructure & application security architecture, compliance frameworks, and risk management principles
- Experience with infrastructure & application security assessments, risk assessments, and security controls implementation
- Excellent analytical, problem-solving, and communication skills
- Familiarity with security framework, tools, and technologies (e.g., OSWAP, CSPM, CWPP, CIEM, DAST/SAST)
- Certifications in risk management, or related fields (e.g., CRISC,CCSP, CISSP)
Responsibilities
Job Summary:
We are seeking a seasoned Cyber security Lead to work on the Application risk assessment and
operational security in our both traditional and private cloud infrastructure and applications.
The successful candidate will perform risk assessment, security validation and exceptions,
review security incidents, different level of risk assessments, driving security programs and
follow the remediation with close Governance.
Responsibilities:
- Conduct risk assessments and security evaluations of private cloud control plane services (API Services) & and On-Prem application/infrastructure
- Identify and assess threats, vulnerabilities, risks and potential attack vectors and prioritize the mitigation
- Assess and manage IT risk treatment in all new projects or infrastructure within its scope (integration of security into projects, secure by design processes)
- Enforce Group policies / standards and/or procedures / good security practices within its department.
- Develop and implement risk mitigation strategies and security controls
- Drive security program such as Pen test and Vulnerability programs globally
- Evaluate security configurations, policies, and procedures
- Perform security validations and exceptions for different need on day to day basis (AV , Browsing exceptions, RAF,admin rights, firewall flow, secureshare access etc.);
- Assess compliance with industry standards and regulatory requirements (e.g., NIST, SOC 2, PCI-DSS, OWASP)
- Develop and maintain risk management frameworks, playbooks, and reporting dashboards
- Communicate risk and security recommendations to stakeholders
- Contribute to security audits (internal audit / regulators) within its scope
- Ensure proper work distribution between team members and help team members as and when required
- To act as a security expert and point of contact on all the operational security and risk management activities
- Lead the resolution of security incidents and contribute to the post-mortem investigation of security incidents
- Lead the remediation of critical vulnerabilities in coordination with technical teams, SOC and CERT.
- Monitor and coordinate for timely closure of audit recommendations (internal / regulators), if necessary, intervene in support of operational teams.
- Communicate the status of security audits (internal audit / regulators) as well as the plans for dealing with recommendations.
- Communicate on its activities (definition of relevant KPIs/KRIs) and on security alert points.
Profile
Profile Required:
- 8+ years of experience in application risk assessment, operational security and risk management or related fields
- Strong understanding of infrastructure & application security architecture, compliance frameworks, and risk management principles
- Experience with infrastructure & application security assessments, risk assessments, and security controls implementation
- Excellent analytical, problem-solving, and communication skills
- Familiarity with security framework, tools, and technologies (e.g., OSWAP, CSPM, CWPP, CIEM, DAST/SAST)
- Certifications in risk management, or related fields (e.g., CRISC,CCSP, CISSP)
Salary : Rs. 0.0 - Rs. 12,00,000.0
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
8+ years of experience in application risk assessment, operational security and risk management or related fields
- Strong understanding of infrastructure & application security architecture, compliance frameworks, and risk management principles
- Experience with infrastructure & application security assessments, risk assessments, and security controls implementation
- Excellent analytical, problem-solving, and communication skills
- Familiarity with security framework, tools, and technologies (e.g., OSWAP, CSPM, CWPP, CIEM, DAST/SAST)
- Certifications in risk management, or related fields (e.g., CRISC,CCSP, CISSP)
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Role Category :Programming & Design
Role :Cyber Security Lead - On Prem-Gen2 OSM PAS/PLT
The Service consists in contributing to:
1) Transversal topics related to the security of Digital Workplace environments:
- Recommendations to project management and architecture for the consideration of security constraints in accordance with the guidelines of the group.
- Risk analysis on the different subjects followed.
- Presentation of the risks to the business / sponsor for acceptance.
- The implementation of mitigation measures.
- Drafting of PASFs for outsourced services.
- Piloting the pen tests on the entrusted perimeters.
2) Contributions to the activities of the entity's Security Run
- Resolution of incidents on managed perimeters
- Monitoring of vulnerability on managed perimeters
The expected deliverables are:
● Security specification for new projects and new solutions
● Security and risk analysis aligned to Societe Generale Processes:
· Risk analysis on target infrastructure
· Mitigation proposal with expert and architects
· Presentation to worldwide security community
· Follow up of mitigation implementation and pentest
· Risk review with management and ORM
● Security rules & SSAP documents for external services and contractors
● Security RUN deliverable
· Incident/Vulnerability follow up on target perimeter.
· Control definition and industrialization
· Recurrent risk review: Sensitivity Assessments / Risk Assessments
· Security validation: Flows, Rights, Exceptions and, Profiles
Profile
Relevant Experience: 8 – 12 Years
• MS Exchange/IronPort
• MS Windows administration and hardening
• Teams Téléphonie/SBC EBC
• Security Standards: ISO 27001/27005, NIST, CIS, EBIOS.
Responsibilities
The Service consists in contributing to:
1) Transversal topics related to the security of Digital Workplace environments:
- Recommendations to project management and architecture for the consideration of security constraints in accordance with the guidelines of the group.
- Risk analysis on the different subjects followed.
- Presentation of the risks to the business / sponsor for acceptance.
- The implementation of mitigation measures.
- Drafting of PASFs for outsourced services.
- Piloting the pen tests on the entrusted perimeters.
2) Contributions to the activities of the entity's Security Run
- Resolution of incidents on managed perimeters
- Monitoring of vulnerability on managed perimeters
The expected deliverables are:
● Security specification for new projects and new solutions
● Security and risk analysis aligned to Societe Generale Processes:
· Risk analysis on target infrastructure
· Mitigation proposal with expert and architects
· Presentation to worldwide security community
· Follow up of mitigation implementation and pentest
· Risk review with management and ORM
● Security rules & SSAP documents for external services and contractors
● Security RUN deliverable
· Incident/Vulnerability follow up on target perimeter.
· Control definition and industrialization
· Recurrent risk review: Sensitivity Assessments / Risk Assessments
· Security validation: Flows, Rights, Exceptions and, Profiles
Profile
Relevant Experience: 8 – 12 Years
• MS Exchange/IronPort
• MS Windows administration and hardening
• Teams Téléphonie/SBC EBC
• Security Standards: ISO 27001/27005, NIST, CIS, EBIOS.
Salary : Rs. 0.0 - Rs. 12,00,000.0
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Independently design components, develop code and test case scenarios by applying relevant software craftsmanship principles and meet the acceptance criteria.
Complete the assigned learning path. Take part in team ceremonies be it agile practices or chapter meetings.
Deliver on all aspects of Software Development Lifecyle (SDLC) in-line with Agile and IT craftsmanship principles.
Deliver high-quality clean code and design that can be re-used.
Actively, work with other development teams to define and implement API's and rules for data access.
Ensure customers, stakeholders and partners are rightly communicated on time.
Assess production improvement areas such as recurrent issues.
Perform daily checks and maintain required standards and production processes.
Provide suggestions for automating the repetitive and regular production activities.
Perform bug-free release validations and produce metrices, tests and defect reports.
Assist in developing guidelines and ensuring that team practices them.
Ability to perform level 2/level 3 production support
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Mandatory: Linux
Red Hat Linux 7 / 8/ 9
Solaris 9/10/11
Veritas Volume Manager
Scripting - Shell / Perl / Python
x86 Hardware (HP/DELL/IBM)
Volumetry on SAN / NAS
Veritas cluster
Vmware and cloud platform
Tools: IDM, CyberArk,Ansible, Puppet
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Experience in the implementation and execution of documented support processes.
Basic scripting experience in Python or similar languages for automation.
Familiarity with NetApp Cmode/Storage Grid and provisioning/snap mirror replication for CIFS and NFS.
Understanding of patch and firmware updates on NetApp clusters.
Experience troubleshooting NetApp filers in SAN and NAS environments.
Ability to assist in preparing and updating disaster recovery documentation.
Basic project management skills to plan and coordinate activities.
Exposure to incident management, configuration management, and capacity management.
Knowledge of Windows and Linux server administration.
Familiarity with ticketing tools like Remedy and ServiceNow.
Good understanding of ITIL processes and involvement in incident/change/problem management.
Strong technical documentation skills.
Interest in cloud storage products and vendors is a plus.
Commitment to continuous learning and sharing knowledge with colleagues.
Responsibilities
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
Purpose:
Essential role in the management and development of critical areas of the Userdesk application, both in the old and new infrastructure, with a focus on modules such as iBank, delegations, leave and bank departures. He excels in technical analysis, architectural vision on the application and a logical thinking that contributes to code stability and scalability.
Responsibilities:
Responsible for iBank area - development, maintenance and customization in both legacy and new architectures.
Manage the delegations, leaves and leave modules of the bank in Userdesk.
Propose and implement effective solutions to improve the application architecture.
Actively participate in functional and technical requirements analysis.
Realizes and supports the application architectural overview at code level.
Works closely with colleagues to align internal architecture with business requirements.
Contributes to maintenance, bugfixing and continuous optimization of developed components.
Handles process and workflow automations for bank departures or vacations.
Actively participates in code review and supports maintaining clean and well documented code.
Stack Technology:
Frontend: Livewire, JavaScript, HTML5, CSS3, Bootstrap
Backend: PHP (Laravel), REST APIs
Database: Mysql, Oracle, SQL Server
Architecture and analysis: Design pattern-uri, refactoring, functional flow analysis
Other: LDAP, Postman and unitary tests
Profile
Key competencies:
Solid experience in developing complex web applications (including mixed infrastructures: legacy & modern)
Excellent technical and architectural analysis skills
Overview of application operation and internal workflows
In-depth knowledge of sensitive areas of the platform (leave, delegation, iBank)
Ability to optimize and refactor existing code
Attention to detail and orientation towards clarity, organization and efficiency
Responsibilities
Purpose:
Essential role in the management and development of critical areas of the Userdesk application, both in the old and new infrastructure, with a focus on modules such as iBank, delegations, leave and bank departures. He excels in technical analysis, architectural vision on the application and a logical thinking that contributes to code stability and scalability.
Responsibilities:
Responsible for iBank area - development, maintenance and customization in both legacy and new architectures.
Manage the delegations, leaves and leave modules of the bank in Userdesk.
Propose and implement effective solutions to improve the application architecture.
Actively participate in functional and technical requirements analysis.
Realizes and supports the application architectural overview at code level.
Works closely with colleagues to align internal architecture with business requirements.
Contributes to maintenance, bugfixing and continuous optimization of developed components.
Handles process and workflow automations for bank departures or vacations.
Actively participates in code review and supports maintaining clean and well documented code.
Stack Technology:
Frontend: Livewire, JavaScript, HTML5, CSS3, Bootstrap
Backend: PHP (Laravel), REST APIs
Database: Mysql, Oracle, SQL Server
Architecture and analysis: Design pattern-uri, refactoring, functional flow analysis
Other: LDAP, Postman and unitary tests
Profile
Key competencies:
Solid experience in developing complex web applications (including mixed infrastructures: legacy & modern)
Excellent technical and architectural analysis skills
Overview of application operation and internal workflows
In-depth knowledge of sensitive areas of the platform (leave, delegation, iBank)
Ability to optimize and refactor existing code
Attention to detail and orientation towards clarity, organization and efficiency
Salary : As per industry standard.
Industry :IT-Software / Software Services
Functional Area : IT Software - Application Programming , Maintenance
