Information Security Analyst

LNT/ISA/1342217

SU-L&T SufinMetropolitan-BKC

Title Information Security Engineer

Team Information Security

Reporting To Lead - Information Security

Location Mumbai, India

Job Purpose

 The person appointed will be part of the Information Security Team and responsible for protecting the

systems from cyber threats, including bugs, malware and hacking attempts.

 Analyse and mitigate security risks by identifying, assessing, and prioritizing vulnerabilities, while also staying

informed about emerging threats and industry trends to enhance an organization's security posture.

 Identify existing issues and build safeguards to avoid future threats.

Key Responsibilities

 Vulnerability Assessment and Scanning: Conduct regular assessments of systems, networks, and

applications to identify vulnerabilities. Utilize vulnerability scanning tools and techniques to detect

weaknesses. Analyse scan results and prioritize vulnerabilities based on potential impact and exploitability.

 Remediation and Mitigation: Develop and implement remediation plans to address identified

vulnerabilities. Collaborate with development, IT, and other teams to ensure timely patching and

configuration changes. Monitor the effectiveness of remediation efforts and ensure vulnerabilities are

resolved.

 Documentation and Reporting: Maintain accurate documentation of vulnerability assessments,

remediation efforts, and security policies. Prepare reports and presentations to communicate security findings

and recommendations to stakeholders.

 Continuous Improvement: Proactively identify areas for improvement in the TVM program. Stay up to

date on the latest security technologies and methodologies.

 Operations Management: Work with Lead – Information security for managing various IT security

projects in terms of design, plan, and implementation of security infrastructure & solutions.

Assist in developing security-related documents such as SOPs, Process documents, Operational Reports &

Metrics Dashboards, etc. Day to day management, troubleshooting and housekeeping of security toolsets.

Assist to deliver and maintain security metrics and improvements. Ensuring work is completed in such a way

to comply with established compliance and other internal standards.

Experience

 6+ years of experience in Information Security Management with proven experience as Information Security

engineer.

 Working knowledge of networks, protocols, standards, Linux/Unix/Window OS internals, and system

configuration.

 Ability to manage complex security scenarios and develop innovative solutions to address the most recent

cyber threats and OS Security (Windows, Mac, Linux).

 Thorough understanding of the latest technologies, security principles, and protocols.

 Complete command on dealing with security systems, intrusion detection systems, firewalls, anti-virus

software, log management, authentication systems, content filtering, etc.

Qualifications

Degree qualified in B.E. / B Tech – IT/CS/EXTC/ELEX or any Graduate desirable.

Cloud Security/CISM/CEH/CCNA Security or similar certifications preferred.

Key Competencies/Behaviours

 Ability to adapt to new technologies and learn quickly.

 Multi-tasking and time-management skills, with the ability to prioritize tasks.

 Excellent analytical and problem-solving skills.

 Ability to understand the problem clearly and provide solution with excellent communication skills.

 Strong Project Management skills.