Security Operation Engineer Jobs

Here is the JD—

Job Title-- Security Operation Engineer

Location--Remote

Contract Role

Must Have Skills: IAM, Firewall/IDS/IPS rules, Cloud service provider environment, Linux environment, PCI-DSS & SOC2 security controls, Build security control dashboards, TCL, Shell or Python Scripting, API testing, VAPT on Web and Network, Tenable/Nessus, Qualys

Primary Responsibilities:

• Engage with customer to understand security controls, tools configuration/implementation requirements as per PCI-DSS & SOC2 standard and framework

• Configure, integrate and implement various security controls using tools and technologies (IAM, MFA, SSO, Firewall/IDS/IPS systems, Network/application vulnerability scanners etc) in cloud environment

• Understand of Security Industry Standards and Compliance Frameworks and Requirements (PCI-DSS, SOC2, FedRAMP, NIST etc.)

• Build dashboards of various security controls implemented for reviews by compliance team

• Good analytical and problem solving skills with ability to find root cause of issues

•Excellent Communication skills and ability to interact and manage customer expectations

•Experience in Vulnerability assessment using tools like tenable, nessus, qualys etc.

Skills:

Must Have

• >4 years of experience in security operations - Configuration, integration, implementation & testing of various security controls in cloud environment

• Deep understanding of security controls/services/tools for cloud hosted applications as per PCI-DSS & SOC2 standards

• Strong Experience implementing security controls in cloud hosted environments using tools and technologies (IAM, MFA, SSO, DLP systems, Firewall/IDS/IPS systems, Secure Configurations, Network/application vulnerability scanners like tenable, nessus, qualys etc.)

• Working experience on any one LINUX flavour (Red Hat, UBUNTU, DEBIAN etc) and LINUX system utilities

• Understanding of some of the Security Industry Standards and Compliance Frameworks, Controls and Requirements (PCI-DSS, SOC2, FedRAMP, CIS configuration Benchmarks, NIST etc.)

• Understanding of OWASP vulnerabilities and common network/application/API attacks

Nice to Have

• Any one of the Certification like CISA, CISM, COMP TIA Security+, GSEC, CASP+

• Some experience in Python/Shell Scripting

Thanks & Best Regards

Anushka Singh Bhadauria

Sr Executive- US Recruitment

DCM Infotech Limited

[email protected]

(510)764-1023