Cybersecurity Operations Engineer II (WAF
- Ficosa Engineering
- 2 to 6 Yrs
- Bengaluru
- 6 years ago
- Email to a friend
- Report this job
Job Description
Reporting to the Sr. Manager, Cyber Security Configuration Management and Vulnerability Management (CMVM) and Endpoint Operations, this role is responsible for managing corporate wide efforts in the areas of securing FICO s web application by developing, implementing and monitoring policies on Web Application Firewall (WAF) and related incident handling. The WAF Engineer will on board new web applications, monitor, assess, and fine-tune the WAF policies through incident monitoring and analysis, as well as tracking remediation of system/application vulnerability assessment scan findings and 3rd party risk assessment reviews, as required.
This position will collaborate with technology, security, and product development groups across the corporation to drive successful execution of the web application security program to ensure an appropriate enterprise security posture.General IT knowledge is required. A solid understanding of OS s, IP networks, database, and application functionality are critical. This position should be able to participate in technical discussions with IT partners and have the ability to quickly understand the FICO Technology environment s key applications.
Job Description
- Collaborate with the Cyber Security Operations Team, Product Development and operations around Web application to drive visibility of all aspects of the delivery of secure web exposure and associated applications.
- Provide expertise as an internal subject matter expert with respect to web application security and its related infrastructure, policy and decision-making processes to ensure alignment with FICO s business model and enterprise risk strategy.
- Under limited supervision, Develop, Support and engineering of the Web Application Firewall policies
- Engineer and Architect solutions using WAF or other security products. Develops and maintains WAF security design documentation.
- Work with internal delivery teams to integrate applications with WAF policies
- Provide accurate and timely reporting on all project deliverables
- Recommends secure and effective solutions for system/application development in compliance with Information Security processes and concepts for applicable systems and software.
- Understands business objectives and provides direction based on best practices, risk, Corporate Policy, and association and regulatory guidelines.
- Manages large scale, highly technical projects; display solid and effective project management skills
- Leads enterprise-wide definition, establishment and maintenance of data security-related infrastructure, applications and processes
- Conduct security reviews of core security infrastructure & online applications
- Candidate will be expected to participate in an on-call rotation
- Mentors on assessing and disseminating threats related to the enterprise in regard to current vulnerability, on managing and developing an emerging threat model.
- Consults on incident handling process which includes implementation of containment, protection and remediation activities. Manage WAF Incidents and work with development teams to resolve application issues identified by WAF incidents
- Reviews circumstances surrounding web application security incidents and designs corrective actions. Documents security policies and procedures
- Mentors on new and emerging threats that can affect the organization s information assets, researches the third-party software/solutions, IT configuration changes (including access control requests), and network/system architecture from risk perspective, and provides appropriate direction.
- Work on problems of diverse scope where analysis of situation requires evaluation and judgment. Provide 3rd level support for complex issues and problems.
- Produce service levels consistent with current business needs and future requirements.
- Ensure the control, reliability, performance, and security of all distributed platforms.
- Elicits requirements, design, develop, and implement application security solutions with guidance from other Security Engineers and application developers
- Provide guidance to business functions on security-related matters. Establish standards and guidelines around the security of web applications
- Initiate improvement activity to reduce risk, ensure compliance, lower cost, and improve quality within IT processes.
- Support additional internal and external compliance activity as required.
- Regularly interact with all levels of management and peers with dignity, respect, and tact.
,
Employement Category:
Employement Type: Full timeIndustry: IT - Software
Role Category: Network / System Administration
Functional Area: Not Applicable
Role/Responsibilies: Cybersecurity Operations Engineer II (WAF
Contact Details:
Company Name: FICOLocation(s): Bengaluru
Similar positions
Ficosa Engineering
Ficosa India Engineering Center Pvt Ltd We are a top-tier global provider devoted to the research, development, manufacturing, and marketing of advanced technology vision, safety, connectivity, and efficiency systems for the motor and mobility sectors. Our desire is to contribute to society thro...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in