2,278 Security Consultant jobs in India

Information Security Consultant
Mumbai, India;Chennai, India; Gf, Hyderabad
**To proceed with your application, you must be at least 18 years of age.**
Acknowledge
Refer a friend
**To proceed with your application, you must be at least 18 years of age.**
Acknowledge ( Description:**
**About Us**
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
**Global Business Services**
Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.
**Process Overview***
Global Information Security (GIS) functions by analyzing, researching, improving, defining, implementing, and executing information security processes defined, in large part, by past high profile audit issues. Key responsibilities include Data Quality management of closed manually identified P2 vulnerabilities, developing an understanding of the LOBs that report vulnerabilities via manual flat file to GIS, following standard practices and procedures in analyzing situations or data, and supporting team members in performing specialized GIS functions, primarily Data Quality assurance. Job expectations include partnering with teams inside, and outside, of GIS, inclusive of GIS, CTI, EET, APS&E, GT Risk, and others.
**Job Description***
Position will be a member of the Third Party Cyber Security Alternative Assurance Program (TPAAp) organization in Global Information Security (GIS), responsible for conducting information security assessments of third parties by reviewing independent audit reports (e.g., SOC 2 Type 2, ISO 27001, PCI DSS RoC) or Self Attestation / Assessment reports (e.g., SIG, PCI DSS AoC) to document a point of view on the information security posture of the third party. The position will be a key player in driving strategic initiatives focused on the design of Third Party Alternative Assurance (TPAA) program requirements, governance routines, consequence processes, and third party risk metrics and reporting. In addition to supporting strategic initiatives, the position will include analyzing and interpreting diverse information security risk indicators to deliver actionable insights into third party information security risk and enable prioritized cyber security assurance approaches. Position requires interaction with the third party cyber assessment team, technical subject matter experts, GIS Policy, and the internal and external third party management community.
**Responsibilities***
+ Candidates must have at least 8-10 years of relevantexperience. (Previousinformation technology/security audit/assessment experience is a plus.).
+ Previous security audit/assessment or remediation experience.
+ Previous experience reviewing independent audit reports / certification (e.g., ISO 27001, SOC 2 Type 2, PCI DSS RoC).
+ Previous experience reviewing self attestation / assessment reports (e.g., SIG, PCI DSS AoC).
+ Self-starting, organized, and requiring minimal management oversight.
+ Ability to operate across organizational boundaries and hierarchies to accomplish tasks.
+ Strong analytical skills/problem solving/conceptual thinking/attention to detail.
+ Ability to work effectively with peers and various levels of management.
+ Well organized and thorough, with the ability to balance and prioritize.
+ Excellent verbal and written communication skills across multiple levels of the organization.
**Requirements***
**Education* :** B.E. / B Tech / M.E. / M Tech / MCA / M.Sc.,
**Certifications (If Any) :** ISO 27001 LA, Ethical Hacking, CISA, CISM
**Experience Range* :** 8-15 Years
**Foundational Skills***
+ Experience in Information Security Management
+ Experience in Governance, Risk & Compliance
+ Experience in internal or external audits
+ Experience with ISO 27001 and SOC 2 Type 2 control frameworks.
+ Experience in implementing or reviewing ISO 27001, PCI, SOX, etc., controls
+ Strong analytical and problem solving skills
+ Excellent written/verbal communication skills
**Desired Skills***
+ Knowledge in Vulnerability Assessments and Application Architecture
+ Cloud Security
+ Understanding of Networking, Systems Admin, Cryptography, Access Management
**Work Timings* :** 1:30 PM - 10:30 PM
**Job Location* :** HYD, MUM, CHN
Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.
To view the "Know your Rights" poster, CLICK HERE ( .
View the LA County Fair Chance Ordinance ( .
Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy ("Policy") establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.
To view Bank of America's Drug-free Workplace and Alcohol Policy, CLICK HERE .
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Bank's required accommodation request process before your first day of work.
This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.

Information Security Consultant
Mumbai, India;Chennai, India; Gf, Hyderabad
**To proceed with your application, you must be at least 18 years of age.**
Acknowledge
Refer a friend
**To proceed with your application, you must be at least 18 years of age.**
Acknowledge ( Description:**
**About Us**
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
**Global Business Services**
Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.
**Process Overview***
Global Information Security (GIS) functions by analyzing, researching, improving, defining, implementing, and executing information security processes defined, in large part, by past high profile audit issues. Key responsibilities include Data Quality management of closed manually identified P2 vulnerabilities, developing an understanding of the LOBs that report vulnerabilities via manual flat file to GIS, following standard practices and procedures in analyzing situations or data, and supporting team members in performing specialized GIS functions, primarily Data Quality assurance. Job expectations include partnering with teams inside, and outside, of GIS, inclusive of GIS, CTI, EET, APS&E, GT Risk, and others.
**Job Description***
Position will be a member of the Third Party Cyber Security Alternative Assurance Program (TPAAp) organization in Global Information Security (GIS), responsible for conducting information security assessments of third parties by reviewing independent audit reports (e.g., SOC 2 Type 2, ISO 27001, PCI DSS RoC) or Self Attestation / Assessment reports (e.g., SIG, PCI DSS AoC) to document a point of view on the information security posture of the third party. The position will be a key player in driving strategic initiatives focused on the design of Third Party Alternative Assurance (TPAA) program requirements, governance routines, consequence processes, and third party risk metrics and reporting. In addition to supporting strategic initiatives, the position will include analyzing and interpreting diverse information security risk indicators to deliver actionable insights into third party information security risk and enable prioritized cyber security assurance approaches. Position requires interaction with the third party cyber assessment team, technical subject matter experts, GIS Policy, and the internal and external third party management community.
**Responsibilities***
+ Candidates must have at least 8-10 years of relevantexperience. (Previousinformation technology/security audit/assessment experience is a plus.).
+ Previous security audit/assessment or remediation experience.
+ Previous experience reviewing independent audit reports / certification (e.g., ISO 27001, SOC 2 Type 2, PCI DSS RoC).
+ Previous experience reviewing self attestation / assessment reports (e.g., SIG, PCI DSS AoC).
+ Self-starting, organized, and requiring minimal management oversight.
+ Ability to operate across organizational boundaries and hierarchies to accomplish tasks.
+ Strong analytical skills/problem solving/conceptual thinking/attention to detail.
+ Ability to work effectively with peers and various levels of management.
+ Well organized and thorough, with the ability to balance and prioritize.
+ Excellent verbal and written communication skills across multiple levels of the organization.
**Requirements***
**Education* :** B.E. / B Tech / M.E. / M Tech / MCA / M.Sc.,
**Certifications (If Any) :** ISO 27001 LA, Ethical Hacking, CISA, CISM
**Experience Range* :** 8-15 Years
**Foundational Skills***
+ Experience in Information Security Management
+ Experience in Governance, Risk & Compliance
+ Experience in internal or external audits
+ Experience with ISO 27001 and SOC 2 Type 2 control frameworks.
+ Experience in implementing or reviewing ISO 27001, PCI, SOX, etc., controls
+ Strong analytical and problem solving skills
+ Excellent written/verbal communication skills
**Desired Skills***
+ Knowledge in Vulnerability Assessments and Application Architecture
+ Cloud Security
+ Understanding of Networking, Systems Admin, Cryptography, Access Management
**Work Timings* :** 1:30 PM - 10:30 PM
**Job Location* :** HYD, MUM, CHN
Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.
To view the "Know your Rights" poster, CLICK HERE ( .
View the LA County Fair Chance Ordinance ( .
Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy ("Policy") establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.
To view Bank of America's Drug-free Workplace and Alcohol Policy, CLICK HERE .
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Bank's required accommodation request process before your first day of work.
This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.

Company Description

Presidio Information Risk Management LLP (PIRM) is a leading provider of Information Security, Cyber Security, Compliance, and Risk Management solutions in India, USA, Asia, Europe, and the Middle East. We serve over 150 clients and operate a dedicated managed security testing and compliance lab. Our services span Application Security Testing, Mobile App Testing, VAPT, Configuration Checks, Cloud Security Services, and Managed Security Testing solutions. PIRM also offers governance solutions like ISO 27001, HIPAA, SOC 2, CCPA, GDPR, PCI DSS, Risk Management, Security AMC, Sustenance, Policies, Audits, Security Strategy, and Data Privacy solutions. Additionally, we offer v-CISO and v-DPO services, along with remote monitoring and measurement of compliance standards such as SOC 2 and ISO 27001.

Role Description

This is a full-time hybrid role for an Information Security Consultant, located in Pune with some work from home flexibility. The Information Security Consultant will be responsible for managing and implementing Information Security Management Systems (ISMS), ensuring data privacy, handling cybersecurity protocols, and maintaining network security. Day-to-day tasks include conducting security assessments, risk management, compliance audits, and developing security strategies for clients.

Qualifications

• Proficiency in Information Security Management Systems (ISMS) and Information Security Management
• Good understanding of Data Privacy protocols and regulations
• Knowedge of VAPT
• Hands on expirience in implementing and auditing ISO 27001, SOC2 or similar standards.
• Excellent problem-solving and analytical skills
• Bachelor’s degree in Information Technology, Computer Science, or related field
• Certifications such as CISSP, CISM, or CISA are a plus
• Ability to work independently and in a team

Company Description

Presidio Information Risk Management LLP (PIRM) is a leading provider of Information Security, Cyber Security, Compliance, and Risk Management solutions in India, USA, Asia, Europe, and the Middle East. We serve over 150 clients and operate a dedicated managed security testing and compliance lab. Our services span Application Security Testing, Mobile App Testing, VAPT, Configuration Checks, Cloud Security Services, and Managed Security Testing solutions. PIRM also offers governance solutions like ISO 27001, HIPAA, SOC 2, CCPA, GDPR, PCI DSS, Risk Management, Security AMC, Sustenance, Policies, Audits, Security Strategy, and Data Privacy solutions. Additionally, we offer v-CISO and v-DPO services, along with remote monitoring and measurement of compliance standards such as SOC 2 and ISO 27001.

Role Description

This is a full-time hybrid role for an Information Security Consultant, located in Pune with some work from home flexibility. The Information Security Consultant will be responsible for managing and implementing Information Security Management Systems (ISMS), ensuring data privacy, handling cybersecurity protocols, and maintaining network security. Day-to-day tasks include conducting security assessments, risk management, compliance audits, and developing security strategies for clients.

Qualifications

Proficiency in Information Security Management Systems (ISMS) and Information Security Management
Good understanding of Data Privacy protocols and regulations
Knowedge of VAPT
Hands on expirience in implementing and auditing ISO 27001, SOC2 or similar standards.
Excellent problem-solving and analytical skills
Bachelor’s degree in Information Technology, Computer Science, or related field
Certifications such as CISSP, CISM, or CISA are a plus
Ability to work independently and in a team

Company Description

Presidio Information Risk Management LLP (PIRM) is a leading provider of Information Security, Cyber Security, Compliance, and Risk Management solutions in India, USA, Asia, Europe, and the Middle East. We serve over 150 clients and operate a dedicated managed security testing and compliance lab. Our services span Application Security Testing, Mobile App Testing, VAPT, Configuration Checks, Cloud Security Services, and Managed Security Testing solutions. PIRM also offers governance solutions like ISO 27001, HIPAA, SOC 2, CCPA, GDPR, PCI DSS, Risk Management, Security AMC, Sustenance, Policies, Audits, Security Strategy, and Data Privacy solutions. Additionally, we offer v-CISO and v-DPO services, along with remote monitoring and measurement of compliance standards such as SOC 2 and ISO 27001.

Role Description

This is a full-time hybrid role for an Information Security Consultant, located in Pune with some work from home flexibility. The Information Security Consultant will be responsible for managing and implementing Information Security Management Systems (ISMS), ensuring data privacy, handling cybersecurity protocols, and maintaining network security. Day-to-day tasks include conducting security assessments, risk management, compliance audits, and developing security strategies for clients.

Qualifications

• Proficiency in Information Security Management Systems (ISMS) and Information Security Management
• Good understanding of Data Privacy protocols and regulations
• Knowedge of VAPT
• Hands on expirience in implementing and auditing ISO 27001, SOC2 or similar standards.
• Excellent problem-solving and analytical skills
• Bachelor’s degree in Information Technology, Computer Science, or related field
• Certifications such as CISSP, CISM, or CISA are a plus
• Ability to work independently and in a team

Company Description

Presidio Information Risk Management LLP (PIRM) is a leading provider of Information Security, Cyber Security, Compliance, and Risk Management solutions in India, USA, Asia, Europe, and the Middle East. We serve over 150 clients and operate a dedicated managed security testing and compliance lab. Our services span Application Security Testing, Mobile App Testing, VAPT, Configuration Checks, Cloud Security Services, and Managed Security Testing solutions. PIRM also offers governance solutions like ISO 27001, HIPAA, SOC 2, CCPA, GDPR, PCI DSS, Risk Management, Security AMC, Sustenance, Policies, Audits, Security Strategy, and Data Privacy solutions. Additionally, we offer v-CISO and v-DPO services, along with remote monitoring and measurement of compliance standards such as SOC 2 and ISO 27001.

Role Description

This is a full-time hybrid role for an Information Security Consultant, located in Pune with some work from home flexibility. The Information Security Consultant will be responsible for managing and implementing Information Security Management Systems (ISMS), ensuring data privacy, handling cybersecurity protocols, and maintaining network security. Day-to-day tasks include conducting security assessments, risk management, compliance audits, and developing security strategies for clients.

Qualifications

• Proficiency in Information Security Management Systems (ISMS) and Information Security Management
• Good understanding of Data Privacy protocols and regulations
• Knowedge of VAPT
• Hands on expirience in implementing and auditing ISO 27001, SOC2 or similar standards.
• Excellent problem-solving and analytical skills
• Bachelor’s degree in Information Technology, Computer Science, or related field
• Certifications such as CISSP, CISM, or CISA are a plus
• Ability to work independently and in a team

Company Description

Presidio Information Risk Management LLP (PIRM) is a leading provider of Information Security, Cyber Security, Compliance, and Risk Management solutions in India, USA, Asia, Europe, and the Middle East. We serve over 150 clients and operate a dedicated managed security testing and compliance lab. Our services span Application Security Testing, Mobile App Testing, VAPT, Configuration Checks, Cloud Security Services, and Managed Security Testing solutions. PIRM also offers governance solutions like ISO 27001, HIPAA, SOC 2, CCPA, GDPR, PCI DSS, Risk Management, Security AMC, Sustenance, Policies, Audits, Security Strategy, and Data Privacy solutions. Additionally, we offer v-CISO and v-DPO services, along with remote monitoring and measurement of compliance standards such as SOC 2 and ISO 27001.

Role Description

This is a full-time hybrid role for an Information Security Consultant, located in Pune with some work from home flexibility. The Information Security Consultant will be responsible for managing and implementing Information Security Management Systems (ISMS), ensuring data privacy, handling cybersecurity protocols, and maintaining network security. Day-to-day tasks include conducting security assessments, risk management, compliance audits, and developing security strategies for clients.

Qualifications

• Proficiency in Information Security Management Systems (ISMS) and Information Security Management
• Good understanding of Data Privacy protocols and regulations
• Knowedge of VAPT
• Hands on expirience in implementing and auditing ISO 27001, SOC2 or similar standards.
• Excellent problem-solving and analytical skills
• Bachelor’s degree in Information Technology, Computer Science, or related field
• Certifications such as CISSP, CISM, or CISA are a plus
• Ability to work independently and in a team

**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
At Kyndryl, our Security Consultants are game-changers, constantly pushing the boundaries of what's possible and transforming the way our customers do business. We're looking for a talented individual who thrives in a dynamic environment and is ready to take on the challenge of protecting organizations from threats both known and unknown - being the defender of tomorrow's digital world.
As a Security Consultant, you'll be the guardian of confidentiality, integrity, and availability, ensuring organizations are shielded from the ever-evolving threat landscape. Your expertise will be sought after as you assess, analyze, and implement effective security measures in customer environments, leaving no stone unturned when it comes to safeguarding their most sensitive data.
Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.
You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.
The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.
In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.
Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.
Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.
Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.
Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth
**Who You Are**
You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
Required Skills and Experience
-Minimum of 5+ years of experience in information security consulting and implementation, with a strong understanding of security principles, practices, and technologies
-Experience managing risks related to the use of processing, storing, or transmitting information to reduce or eliminate impact, integrity, or availability of information and information systems
-Experience conducting security and risk assessments using security frameworks (e.g., NIST, RMF, Common Criteria)
-Excellent communication skills, both written and verbal, with the ability to communicate complex security concepts to technical and non-technical audiences
-Ability to adapt to changing security threats and technologies and stay updated with the latest security trends and best practices
Preferred Skills and Experience
-Past experience in assisting stakeholders in quantifying risks and developing mitigation and remediation strategies
-Understanding and application of NIST Control Framework, Critical Security Controls, and other related regulatory and compliance frameworks
-Experience with cloud security, cyber resiliency/incident management, Zero Trust, network/EDGE security, and emerging technologies such as IoT and AI
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
Are you passionate about cybersecurity and looking for an exciting role where you can make a difference? If so, we have an opportunity for you! As a Security Specialist at Kyndryl, you will play a crucial role in enabling and securing our customer organizations, cultures, and ecosystems.
Your responsibilities will be varied and dynamic, spanning asset classification models, risk assessment reports, information security policies, security solution scenarios, implementation plans, organization models, procedures, security services, security effectiveness evaluation reports, and security awareness workshops. You will be tasked with configuring, monitoring, and managing the performance of networks to maintain the quality of services, while also protecting organizational infrastructure from malicious cyber-attacks.
As a key member of our team, you will assess, predict, prevent, and manage the risk of IT infrastructure and data, helping our customers stay ahead of the curve and ensure their systems are secure. You will develop and implement security policies and procedures, working closely with other departments to ensure that all security measures are in place and operating effectively.
But that is not all - at Kyndryl you will have the opportunity to explore innovation in CyberSecurity data science - taking information that has been gathered and looking for areas to have that "Ah Ha" moment. Drawing conclusions and patterns from the data across single and multiple clients. Creating new ideas in the area of risk management and risk quantification.
In addition to your technical responsibilities, you will also play a key role in raising awareness of potential security threats through technical security training on best practices. This is an exciting opportunity to help shape the culture of our clients' organizations and make a tangible impact on their security posture.
If you have a passion for cybersecurity - governance, risk and compliance, are looking for a challenging and dynamic role, and want to work with a team of like-minded individuals, then we want to hear from you! Join us as a Security Specialist and help us secure the future of our clients' organizations.
Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
**Who You Are**
You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
**Primary Domain Skills Area 1** any 2 SIEM Solution as L3/ SME level ( SIEM Platforms (Splunk, QRadar, ArcSight, LogRhythm) :
**Secondary Domain Skills Area 2** **:** Any 2 EDR/XDR (CrowdStrike, Sentinel One, Defender for Endpoint, Trellix
or
NAC ( Cisco ISE , Forescout NAC , Aruba Clear Pass )
**Key Responsibilities:**
+ Siem Configuration/ Management: Configure, manage and Deploy SIEM / EDR Solution including like ( Splunk, ArcSight, CrowdStrike Falcon, Microsoft Defender) Develop, Manage Policy rules.
+ Perform upgrades, patching, and integration with deferent device feeds.
+ SIEM Security Monitoring & Incident Response: Analyse security events and alerts to identify potential threats.
+ Collaborate with different teams to investigate and respond to incidents.
+ Create and maintain incident response playbooks and escalation procedures.
+ Design and Consulting: Provide consulting on security architecture and best practices for SIEM / EDR deployment strategies
+ Design log onboarding strategies for new applications and infrastructure.
+ Conduct log gap analysis, risk assessments and compliance audits (e.g., PCI-DSS, ISO 27001).
+ *Automation and Reporting: Automate alerting and reporting using scripting and orchestration tools.
+ Generate compliance and executive reports for stakeholders.
+ Secondary Skills:
+ Experience with SOAR/ XDR platforms (e.g., Palo Alto XSOAR, Palo Alto Cortex XDR, Microsoft Defender XDR).
+ NAC Configuration & Management
+ Design, configure, and maintain NAC of various OEM ( Cisco or Forescout or Aruba . )
+ Create authentication ,authorization and posture policy for user
+ Create device authentication, authorization policy and shell profiles
+ Good knowledge of TACACS/Radius protocols
+ Expert knowledge of Design and architecture .
+ Deep Knowledge of integration of NAC with other network and other infrastructure components ( ie Switches , wireless controller , firewalls, AD , LDAP )
+ Familiarity with directory services like AD and LADAP
+ Troubleshooting knowledge of NAC ( Cisco ISE, Forescout etc)
Design and Consulting:
Provide expert consulting services on network security design and architecture.
Develop secure network designs tailored to client needs, ensuring compliance with regulatory requirements.
Collaborate with clients to understand their security requirements and provide customized solutions.
Create and maintain detailed network documentation, Network Diagrams and procedures.
Conduct regular security assessments and audits to identify and mitigate vulnerabilities.
Provide the training session to colleague and customer team members.
Incident Handling:
Lead the response to major security incidents, including detection, analysis, containment, eradication, and recovery.
Develop and implement incident response plans and procedures.
Conduct post-incident reviews and provide RCA.
Good understanding on peer device technology like router switch's and how these technology work e,g ARP, MAC , DNS , SNMP, VRRP, Routing.
Excellent troubleshooting skills on wireshark captures / PCAP etc
**Qualifications** **:**
Education:
+ Graduate in Computer Science/IT/Electronics Engineering or equivalent University degree.
Experience:
+ Candidates should have at least -12+ years of experience working in Security Domain ( SOC, Implementation and or Consultancy of Security Solutions .
Certifications:
+ Relevant certifications such as CCIE Security or CCSE or PCNSE equivalent.
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.