11+ IDP Jobs in India

Job Description: SOC Manager

ESSENTIAL RESPONSIBILITIES          

•      Leadership & Team Management: Leads the SOC team providing clear direction, fostering teamwork and collaboration. Regularly assesses the strengths and weaknesses of team members, providing mentoring, coaching, and opportunities for growth. Hands-on execution across operational challenges, making decisive judgments while ensuring high morale and cohesion.

•      Incident Management: Ensures that all security events and incidents are identified, categorized, and responded to promptly and thoroughly. This includes setting up appropriate escalation processes, coordinating between various teams for cross-functional incidents, and ensuring that incidents are closed with comprehensive documentation and lessons learned.

•      Continuous Improvement: Regularly reviews and analyzes the efficiency of the existing operations processes, tools, and protocols. Implement changes based on findings, feedback from the team, and changing threat landscapes. This also involves staying updated with advancements in SOC technologies and methodologies.

•      Technology Management: Oversees the implementation, configuration, and continuous tuning of various security tools, including the client’s Security Platform.

•      Training and Development: Designs and implements a continuous training plan for the existing and new SOC team members, ensuring they have the latest skills and knowledge and are onboarded and productive as quickly as possible. This also involves organizing periodic simulation exercises (like red teaming) to test and improve incident response capabilities.

•      Reporting: Establishes a comprehensive reporting framework that offers insights into the SOC's performance. This includes metrics on incident volumes, response times, and resolution success rates.

These reports should be presented to stakeholders clearly, actionable, highlighting successes and areas for improvement.

REQUIRED EXPERIENCE

•      Minimum of 6+ years in cybersecurity roles with at least 3 years in a SOC leadership position.

Experience in an MSSP or a large-scale global SOC is highly preferred.

•      Experience in actively managing the lifecycle of security incidents.

•      Strong knowledge and familiarity with major cloud provider technologies (AWS, Azure, etc.)

•      Solid understanding of networking protocols and infrastructure designs, including cloud infrastructures, routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.

•      Experience with virtualization technologies (VMware, Microsoft Hyper-V).

•      Experience with the following tools and technologies:

–     Security Information and Event Management (SIEM)

–     Intrusion Detection & Prevention (IDP) 

–     Endpoint Detection & Response (EDR)

–     Network Detection & Response (NDR)

–     Network Analysis tools - Wireshark, tcpdump, etc. 

–     Scripting in Python, Bash, PowerShell

•      Experience in regulated environments such as HIPAA or PCI preferred.

•      Strong governance skills in time management, project management, and stakeholder management.

•      Excellent communication skills, with ability to lead security-reviews with clients; keep stakeholders appraised of key issues/risks/incidents.

PREFERRED CERTIFICATIONS

•      CISSP – Certified Information Systems Security Professional

•      CISM – Certified Information Security Manager

•      OSCP – Offensive Security Certified Professional

•      CEH – Certified Ethical Hacker

•      GSEC – SANS GIAC Security Essentials

•      CompTIA – Security

OTHER REQUIREMENTS

·      Flexibility of schedule is required to meet the demands of the position.

·      This role requires to work in shifts (including night shift) and support clients in North America.

To us, a Technical Interviewer is a go-to person for technical interviews for any technology. This means that your duties will involve conducting technical interview rounds of candidates having a technical background of any kind.

The job of a Technical Interviewer is important to business success. Hiring the right talent is our most critical point and a vital aspect of a complete Technical Interviewer’s job description and specification.

• Own full technical recruitment process including interviews, feedback, and building talent pipelines
• Identify the right talent for the organization
• Train and mentor new and existing interviewers
• Identify the gaps in the interview process and work on solutions
• Maintain a healthy candidate experience and build the employer brand
• To be up to date with new technologies
• Participate in various coding and technology-related challenges to gain knowledge 
• Nurture a positive working environment
• Have a strong sense of ownership for assigned tasks and a willingness to go the extra mile when needed
• Is an effective communicator who can establish rapport with people at all levels

• Bachelor's Degree in BSc/BE/BTech in Computer Science, Engineering, or a related field
• General programming skills in languages like Java, Javascript, Ruby or equivalent.
• Proven working experience in the same profession or as a trainer 
• People-oriented and results-driven
• The ability to work as part of a team
• Strong analytical and problem-solving skills
• Excellent administrative and organizational skills
• Effective communication skills
• Proven hands-on Software Development experience

    Focussed on delivering scalable performant database platforms that underpin our customer data services in a dynamic and fast-moving agile engineering environment.

·    Experience with different types of enterprise application databases (PostgreSQL a must)

·    Familiar with developing in a Cloud environment (AWS RDS, DMS & DevOps highly desirable).

·    Proficient in using SQL to interrogate, analyze and report on customer data and interactions on live systems and in testing environments.

·    Proficient in using PostgreSQL PL/pgSQL

·    Experienced in delivering deployments and infrastructure as code with automation tools such as Jenkins, Terraform, Ansible, etc.

·    Comfortable using code hosting platforms for version control and collaboration. (git, github, etc)

·    Exposed to and have an opportunity to master automation and learn to use technologies and tools like Oracle, PostgreSQL, AWS, Terraform, GitHub, Nexus, Jenkins, Packer, Bash Scripting, Python, Groovy, and Ansible

·    Comfortable leading complex investigations into service failures and data abnormalities that touch your applications.

·    Experience with Batch and ETL methodologies.

·    Confident in making technical decisions and acting on them (within reason) when under pressure. 

·    Calm dealing with stakeholders and easily be able to translate complex technical scenarios to non-technical individuals.

·    Managing incidents, problems, and change in line with best practice

·    Expected to lead and inspire others in your team and department, drive engineering best practice and compliance, strategic direction, and encourage collaboration and transparency.

About Drip Capital & Tech Team

The engineering team at Drip Capital is responsible for building and maintaining the online global trade financing platform that supports the interactions between buyers, sellers, financing partners, insurance agents, global retail partners, trade agents, shipping & transportation companies, supply chain and warehousing companies worldwide. 

Our primary goal is to ensure that customers are provided time-critical capital and at the same time balance requirements related to risk, fraud management, and compliance. The services are accessed by customers worldwide and hence the engineering systems need to be policy-driven, easily reconfigurable, and able to handle multiple regional languages. We use machine learning for risk classifications/predictions, intelligent document parsing subsystems, robotic process automation, REST APIs to connect our microservices, and a cloud-based data lake and warehouse for data storage and analysis.

Our team comprises talent from top-tier institutions including Wharton, Stanford, and IITs with years of experience at companies like Google, Amazon, Standard Chartered, Blackrock, and Yahoo. We are backed by leading Silicon Valley investors - Sequoia, Wing, Accel, and Y Combinator. We are a global company headquartered in Silicon Valley along with offices in India and Mexico.

Your Role 

As an AppSec Engineer in Drip Capital’s engineering team, you will have the opportunity to take ownership of :

• Contribute to and improve secure SDLC practice
• Design architecture, methods, and controls required to meet security, compliance, and audit requirements.
• Designing and implementing cloud and network security solutions.
• Do comprehensive threat modelling for our applications and infrastructure in an Agile flow
• Perform secure code review and security assessments of web, android and iOS applications, and cloud infrastructure (infrastructure as code).
• Proactively identify vulnerabilities across our platform and work with developers in fixing them.
• Automate and simplify security, as “Complexity is the enemy of Security”.
• Handle Vulnerability Management and Patch Management processes.
• Participate in the investigation related to Privacy/Security incidents and response activities.
• Work with DevOps to implement the security tools and automation of the security tasks.
• Mentor other engineers and evangelize security practices through cross-functional work with DevOps and engineering teams.
• Testing the deployed security solutions to make sure they function as planned.

Our Checklist 

• A minimum of 4 years of experience as an AppSec Engineer
• Hands-on experience in secure design and architecture review of backend services, payments systems like payment gateways.
• Hands-on experience in secure code review and automation of common security workflows.
• Hands-on experience and a proven record of securing one or more of the cloud platforms: Azure, GCP, AWS and Hosted Cloud Solutions.
• Good understanding of OWASP and SANS testing methodologies.
• Good understanding of software security weaknesses and vulnerabilities.
• Good knowledge in securing architecture of web, mobile applications and cloud infrastructure.
• Ability to contribute as an individual and as part of a team
• Working knowledge of any scripting language; Python or Go preferred
• Experience in writing custom tools/scanners/extenders is a plus
• Red teaming experience is a plus

If you love to explore the security aspects of a distributed system that makes decisions related to global trade finance, let's talk!

• Writing in-depth user guides, release updates, product descriptions for the company's suite of products and solutions
• Writing for a variety of audiences, from non-technical end-users to programmers, system administrators, and integrators
• Overseeing peer editing and production review work
• Integrating use case and functional data into user documentation and examples

Desired Candidate Profile

• 3+ years of technical writing experience
• Strong written and verbal communications and experience working with content in multiple mediums
• Experience working cross-departmentally to communicate the nuts and bolts of a product
• Strong experience owning an end-to-end documentation creation process
• Excellent attention to detail and the ability to prioritize and work on multiple projects in a fast-paced, changing environment
• A positive attitude, willingness to jump in and tackle new challenges
• Experience working with the following tools preferred: Confluence/JIRA, Git & Github, HTML, CSS, Jinja, JavaScript, Python, Postman, etc    

Certified Ethical Hacker Requirements:

• Bachelor’s degree in Information Technology or Computer Science.
• CEH Certification.
• Proven work experience of at least 2-5 years as a Certified Ethical Hacker.
• Effective Programming Skills required but not limited to HTML, JavaScript, Python, PHP, SQL etc.
• Advanced knowledge of networking systems and security software.
• In-depth knowledge of parameter manipulation, session hijacking, and cross-site scripting.
• Technical knowledge of routers, firewalls, and server systems.
• Good written and verbal communication skills.
• Good troubleshooting skills.
• Ability to see big-picture system flaws.

• B.Tech/B.E.(IT/Computers), B.Sc( Computers), MSc (IT), BCA (Computer) or any equivalent graduation or post-graduation