Security Engineer

Hi,

We are looking for cloud solution professionals with the following skill sets;

Experience: 10+ years in cloud architecting

Location: Mumbai

Job Responsibilities:

• Analyze and understand customer business processes and workflows, define requirements and design appropriate solutions.
• Provide End 2 end cloud Solutioning along with secured infra
• Collaborate with vendors for the execution
• Well understanding on open source stack frameworks, AWS & Azure Cloud services
• Solutioning extending from green field to enterprise view
• Presentation skills with a high degree of comfort with both large and small audiences.
• High level of comfort communicating effectively across internal and external organizations
• Intermediate/advanced knowledge of the cloud services, market segments, customer base and industry verticals.
• Demonstrated experience leading or developing high quality, enterprise scale software products using a structured system development life cycle.
• Demonstrated ability to adapt to new technologies and learn quickly.
• Certified Solutions Architect( AWS / Azure)
• Recommendations on security, cost, performance, reliability and operational efficiency to accelerate challenging, mission-critical projects
• Experience migrating or transforming customer solutions to the cloud

Primary Skills :

JAVA / J2EE; Spring, Spring Boot, Microservices,Angular JS, Instream data handling, Elastics search DB, Mango DB,DevOps tools- Jenkin, github,maven build, Hands on AWS & Azure cloud services,Mobile: Native and hybrid app hands on;Docker Containers , AKS,Big data and Hbase, Data Lake , service bus, AD

Secondary Skills :

• Extensive experience in Microservices, Rest Services, JPA, Automated unit testing through tools.
• Proven design skills and expertise is required.
• Good knowledge of current / emerging technologies and trends.
• Good analytical, grasping and problem solving skills. Excellent written and verbal communication skills. High levels of initiative and creativity.
• Good communication skills with all stake holders, good team player with ability to mentor juniors

Responsibilities:

• Design, configure, administer, monitor and troubleshoot complex enterprise network environment for communications and solution improvements within the Company's high-traffic, business-critical Internet production environment. 
• Develop and implement plans for infrastructure upgrades, modeling, analysis, and planning.
• Analyze, design, test, and evaluate network systems including local area networks (LAN), wide area networks (SD-WAN), Cloud, Data Centers, and other data communications systems. 
• Design, manage, and maintain office wired and wireless networks.
• Work with complex network and storage environments including SAN, clustering, load balancing, multi-site VPNs, network IDS, and firewalls.
• Monitor network performance and provide security measures, troubleshooting and maintenance, as needed. 
• Acquire, maintain and report on data related to network performance management, capacity planning and utilization trend analysis.
• Provide after-hours support for systems and applications.
• Collaborate with other functional IT areas to ensure that IT best practices, policies, and procedures are adhered to. Provide technical support for staff issues.
• 7+ years of experience in setup, configuration and maintenance of networking infrastructure including Cisco switches, routers, firewalls, VPN technologies, SD-WAN, and other WAN administration.

Experience

• 7+ years of experience with configuring and supporting IP networks.
• 5+ years of experience with Google Cloud Platform (GCP) and multi-region Amazon Web Services (AWS) networking configurations
• 3+ years of experience in managing Meraki wireless networks and equipment in office environments.
• Strong fundamental knowledge of networks, ports, protocols, and infrastructure setup
• Enterprise-Level: Larger than 1,000 PCs and 500 Servers (multi-platform) are a definite plus
• Solid understanding of Microsoft Active Directory, DNS, DHCP, etc. in a large multi-site environment.
• In-depth knowledge of IT standards, concepts, best practices, and procedures - relies on knowledge, experience and judgment to plan and accomplish goals.
• Excellent verbal and written communication skills for purposes of communicating with team members as well as other departments.
• Ability to take initiative & manage multiple detailed tasks in a fast-paced and ever-changing environment.
• Organizational, and project management abilities, strong analytical and problem-solving skills

Education Qualifications:

• Bachelor's Degree: CIS Computer Information Systems; Information Technology, Computer Science or similar.
• CCNP Certification or similar
• Cisco switches, routers, firewalls, VPN technologies, SD-WAN, WAN administration
• Cisco SAN experience
• OS Platforms: Windows / Linux
• Hardware Platforms: Cisco UCS, Cisco Meraki, EMC storage

Job Description: SOC Manager

ESSENTIAL RESPONSIBILITIES          

•      Leadership & Team Management: Leads the SOC team providing clear direction, fostering teamwork and collaboration. Regularly assesses the strengths and weaknesses of team members, providing mentoring, coaching, and opportunities for growth. Hands-on execution across operational challenges, making decisive judgments while ensuring high morale and cohesion.

•      Incident Management: Ensures that all security events and incidents are identified, categorized, and responded to promptly and thoroughly. This includes setting up appropriate escalation processes, coordinating between various teams for cross-functional incidents, and ensuring that incidents are closed with comprehensive documentation and lessons learned.

•      Continuous Improvement: Regularly reviews and analyzes the efficiency of the existing operations processes, tools, and protocols. Implement changes based on findings, feedback from the team, and changing threat landscapes. This also involves staying updated with advancements in SOC technologies and methodologies.

•      Technology Management: Oversees the implementation, configuration, and continuous tuning of various security tools, including the client’s Security Platform.

•      Training and Development: Designs and implements a continuous training plan for the existing and new SOC team members, ensuring they have the latest skills and knowledge and are onboarded and productive as quickly as possible. This also involves organizing periodic simulation exercises (like red teaming) to test and improve incident response capabilities.

•      Reporting: Establishes a comprehensive reporting framework that offers insights into the SOC's performance. This includes metrics on incident volumes, response times, and resolution success rates.

These reports should be presented to stakeholders clearly, actionable, highlighting successes and areas for improvement.

REQUIRED EXPERIENCE

•      Minimum of 6+ years in cybersecurity roles with at least 3 years in a SOC leadership position.

Experience in an MSSP or a large-scale global SOC is highly preferred.

•      Experience in actively managing the lifecycle of security incidents.

•      Strong knowledge and familiarity with major cloud provider technologies (AWS, Azure, etc.)

•      Solid understanding of networking protocols and infrastructure designs, including cloud infrastructures, routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.

•      Experience with virtualization technologies (VMware, Microsoft Hyper-V).

•      Experience with the following tools and technologies:

–     Security Information and Event Management (SIEM)

–     Intrusion Detection & Prevention (IDP) 

–     Endpoint Detection & Response (EDR)

–     Network Detection & Response (NDR)

–     Network Analysis tools - Wireshark, tcpdump, etc. 

–     Scripting in Python, Bash, PowerShell

•      Experience in regulated environments such as HIPAA or PCI preferred.

•      Strong governance skills in time management, project management, and stakeholder management.

•      Excellent communication skills, with ability to lead security-reviews with clients; keep stakeholders appraised of key issues/risks/incidents.

PREFERRED CERTIFICATIONS

•      CISSP – Certified Information Systems Security Professional

•      CISM – Certified Information Security Manager

•      OSCP – Offensive Security Certified Professional

•      CEH – Certified Ethical Hacker

•      GSEC – SANS GIAC Security Essentials

•      CompTIA – Security

OTHER REQUIREMENTS

·      Flexibility of schedule is required to meet the demands of the position.

·      This role requires to work in shifts (including night shift) and support clients in North America.

At Upswing, we are committed to building a robust, scalable & secure API platform to power the world of Open Finance.

We are a passionate and self-driven team of thinkers who aspire to build the rails to connect the legacy financial sector with financial innovators through a simple and powerful banking-as-a-service (BaaS) platform.

We are looking for motivated engineers who will be working in a highly creative and cutting-edge technology environment to build a world-class financial services suite.

About the role

As part of the DevSecOps team at Upswing, you will get to work on building state-of-the-art infrastructure for the future. You will also be –

• Managing security aspects of the Cloud Infrastructure 
• Designing and Implementing Security measures, Incident Response guidelines 
• Conducting Security Awareness Training
• Developing SIEM tooling and pipelines end to end for vulnerability/security/incident reporting 
• Developing automation and performing routine VAPT for Network and Applications
• Integrating with 3rd party vendors for the services required to improve security posture 
• Mentoring people across the teams to enable best practices 

What will you do if you join us?

• Engage in a lot of cross-team collaboration to independently drive forward DevSecOps practices across the org 
• Take Ownership of existing, ongoing, and future DevSecOps initiatives 
• Plan and Engage in Architecture discussions to bring in different angles (especially security angles) to the table
• Build Automation stack and tools for security pipeline 
• Integrate different security measures and pipelines with the SIEM tool
• Conducting routine VAPT using manual and automated workflows, generating and maintaining the report for the same
• Introduce and Implement best practices across teams for a great security posture in the org

You should have

• Curiosity for on-the-job learning and experimenting with new technologies and ideas
• A strong background in Linux environment
• Proven experience in Architecting networks with security first implementation
• Experience with VAPT tooling for Networks and Applications is required 
• Strong experience in Cloud technologies, multi-cloud environments, and best practices in Cloud 
• Experience with at least one scripting language (Ruby/Python/Groovy)
• Experience in Terraform is highly desirable but not mandatory
• Some experience with Kubernetes, and Docker is required 
• Understanding Java web applications and monitoring them for security vulnerabilities would be a plus 
• Any other DevSecOps-related experience will be considered

Job Responsibilities

Primary:

• Responsible for security road map for EPDM application
• Train the CI-CD team on the required technologies security adoptation
• Lead the upskill program within the team
• Support Application architect with right inputs on security processes and tools
• Help setup DevSecOps for EPDM.
• Find Security vulnerability in development process and sealed secretes
• Support in defining the Three-tier architecture.

Secondary:

• Coordination with different IT stakeholders as and when needed
• Suggestion and Implementation of further tool chains towards DevOps and GitOps
• Responsible to train the peer colleagues

Skills:

Mandatory skill:

• Expert knowledge of container solutions. Must have >3 years of experience working with networking & debugging within Docker and Kubernetes.
• Hands-on experience with Kubernetes workload deployments using Kustomize & Helm.
• Good understanding of Bitnami, Hashicorp and other secrete management tools
• SAST/DAST integration in CI/CD pipeline - design, implementation Expert knowledge of Source Control Systems, build & integration tools (e.g., GIT, Jenkins & Maven).
• Hands-on experience with designing the CI/CD architecture & building pipelines (on On-prem, Cloud & Hybrid infrastructure services).
• Experience with Security log management tools (e.g. Splunk ELK/EFK stack, Azure monitor or similar).
• Experience with monitoring tools like Prometheus-Grafana & Dynatrace.
• Experience with Infrastructure as a Service / Cloud computing (preferably Azure).
• Expert in writing automation scripts in Yaml, Unix shell, linux shell.
• Pulumi would be added advantage.

What will you do?

• Act as senior level escalation point for technical remediation of incidents and service requests.
• Work as L2 resource in AWS Cloud infrastructure and system administration team providing technical support and resolving issues
• Troubleshoot technical issues faced which could be related to external interfaces, networking, application and Ubuntu configuration, IIS Configuration, Linux Servers etc.
• Resolving urgent and immediate requests by support team in a vibrant and demanding environment.
• Test upgrades and patches from development team prior to client rollout
• Document the Interface testing and other details, update and complete all handovers.
• Coordinate directly with on-site IT, vendors, off-site helpdesks over email or phone calls to complete technical assignments.
• Do audit of new implemented properties for initial few weeks and identify the repeated issues reported by property.

Technical Competencies you’ll possess:

• Strong Linux and Windows Administration skills
• In depth knowledge of the windows servers & Linux servers.
• Good understanding of AWS Cloud Infrastructure, Networking, Firewall, Infrastructure, SQL and IIS Configuration, Ubuntu Configurations and MySQL.
• Working knowledge of interfaces and integrations of systems.
• Enhanced troubleshooting skills.
• Possess a good understanding of Internet based technologies including DNS, Security, IP Routing,- SSH, FTP, HTTP/HTTPS, Email Routing, etc.

A network of the world's best developers - full-time, long-term remote software jobs with better compensation and career growth.  We enable our clients to accelerate their Cloud Offering and Capitalize on Cloud.  We have our own IoT/AI platform and we provide professional services on that platform to build custom clouds for their IoT devices.  We also build mobile apps, run 24x7 DevOps/site reliability engineering for our clients.

We are looking for a friendly, very hands-on technical, and dependable professional with plenty of experience as a backend & cloud engineer to provide site reliability services to our internal teams and end customers. We expect you to deliver with TOP quality & high speed. You must have experience developing and designing amazing UI screens.

This person MUST have:

• BE Computer Science or equivalent
• Cloud app development experience.
• Strong Troubleshooting and debugging skills
• A strong passion for writing simple, clean, and efficient code.

• 3 years of experience with the Django framework and other backend technologies.
• Knowledge of NodeJS
• Experience with building, modifying, and extending API endpoints (REST or GraphQL) for data retrieval and persistence.
• Understand how to use a database like Postgres (preferred choice), SQLite, MongoDB, MySQL.
• Experience creating high-performance applications.
• Experience with messaging and broker tools - Rabbitmq, MQTT
• Experience with SQL and NoSQL databases
• Experience with the full software development life cycle, including requirements collection, design, implementation, testing, and operational support.
• Knowledge of web services
• Proficient understanding of code versioning tools Git.
• Hands-on experience deploying and managing infrastructure with CloudFormation/Terraform
• Experience managing AWS infrastructure.
• Hands-on experience in Linux environment.
• Basic understanding of Kubernetes/Docker orchestration.
• Manges existing infrastructure/Pipelines/Engineering tools (On-Prem or  AWS) for the engineering team (Build servers/Jenkins nodes etc.)
• Experience with scrum or other agile software development methodology.
• Excellent verbal and written communication, teamwork, decision making and influencing skills.
• Handle customer calls/emails regarding technical issues for end-users.
• Strong communication skills
• Attention to detail.

Experience:

• Min 3 year experience

Location:

• Ahmedabad Office Or,
• Work from home

Timings:

• 40 hours a week with a rotational shift every month.

Position:

• Full time/Direct
• We have great benefits such as PF, medical insurance, 12 annual company holidays, 12 PTO leaves per year, annual increments, Diwali bonus, spot bonuses and other incentives, etc.
• We don't believe in locking in people with large notice periods.  You will stay here because you love the company.  We have only a 30 days notice period

Responsibilities:

• Design and Implement AWS architectures and environments
• Design Native Cloud Application Architectures or optimize applications for AWS

Experience/Requirements:  

• Must be AWS Certified Solution Architect (Professional).
• Overall 10+ years of experience in software development.
• Minimum 5 years hands-on keyboard AWS experience, with deeper capabilities.
• Must have hands-on AWS experience with at least two implementation and/or Migration into AWS (in an Enterprise scale environment)
• Must have experience with AWS API gateway, RDS, Fargate, EC2, S3, CloudFront, CloudWatch, Cognito.
• Must have experience analyzing and improving existing AWS infrastructure and architecture
• Must have Experience with serverless applications and Serverless Application Model
• An understanding of networking and IOT services in AWS
• AWS Cost Management and Optimization