Kotak Mahindra Bank Limited Hiring For Team Member-IT SecuritySUPPORT SERVICES – IT Security at India ,  Full Time

Job Description
Role: Manager
Function: IT Security
Area of Responsibility: Infrastructure Security Assessment
Experience: 4 plus years experience in the field of Infrastructure Security Assessment
Education: Bachelor of Engineering / B.Tech in Computers / IT / Electronics
Certification: CEH, CCNA, CISA etc. (preferable)
Job Requirement:

• Manage the Vulnerability Management program as part of Infrastructure Security Assessment
• Manage a team of vendor resources working 24 X 7 in the Vulnerability Management Program
• Develop a Yearly Calendar for Conducting Vulnerability Assessment & Configuration Audit
• Conduct Assessments before deployment of New Systems & Applications
• Conduct Vulnerability Assessment & Configuration Audits as part of Calendar based Assessments
• Publish Monthly & Weekly dashboard of findings to relevant stakeholders
• Collaborating with different teams for timely remediation of findings discovered as part of assessment
• Performing timely revalidation of findings remediated by different teams.
• Manage major service upgrades and changes to core platforms like Tenable & Prisma to ensure consistency and stability
• Support Statutory, Regulatory, Audit and IT Compliance related requirements in a timely manner

Skills /Knowledge:

• Strong Experience in Vulnerability Assessment Tools like Tenable, Qualys, Prisma etc.
• Experience in working with penetration testing tools like nmap, Metasploit etc.
• Good Understanding on Asset Management Tools like Service-Now
• Experience in scripting especially in Python, Bash and PowerShell or other languages.
• Experience automating processes and procedures
• Understanding of CVSS, OWASP Top 10 and Vulnerability Exploitability ratings.
• Knowledge of public cloud platforms (AWS, Azure), and cloud security
• Ability to assess and communicate risks within a business context
• Excellent written and verbal English communication skills
• Experience in information security and technical security review