Job Description

Responsibilities

As a member of the incident/Workorder/Change handling team , you will have the following accountabilities:

• Will be working as an SME for Zscaler Support in Operations for ZIA, ZPA and ZDX.
• Working in CSIRT and Cyber Security Model. and SIEM tools.
• Working on Vulneravility MGMT
• Assess and orchestrate the current and planned security posture for NTT data’s Security infrastructure, providing recommendations for improvement and risk reduction.
• Identify and propose process improvements and identify opportunities for new processes and procedures to reduce risk.
• Support security incident response as required; First line responder to reported or detected incidents.
• Perform security research, analysis, security vulnerability assessments and penetration tests.
• Provide security audit and investigation support
• Monitor and track security systems for Vulnerability and respond to potential security Vulnerability.
• Provide support for the Vulnerability management program.
• Provide 24x7 support as operations team working in shifts.
• Participate in on-call system administration support including but not limited to weekends, holidays and after-business hours as required to service the needs of the business.

Skills and Experience

• 4 to 5 years+ in Information Security space.
• Strong experiance in Service Now Ticketing tool, Dashboards and Integration.
• Strong experience with Zscaler ZIA, ZPA and ZDX.
• Strong experience with Vulnerability Management Program.
• Strong experience with Qualys Vulnerability Management Tool.
• Some good to have Experience with Crowdstrike EDR and SIEM.
• Strong experience with multiple network operating systems, including two or more of the following: Cisco iOS, Juniper ScreenOS or Junos, Fortinet FortiOS, CheckPoint GAiA, or Palo Alto Networks PAN-OS; Tanium, Rapid 7, Nessus, Nitro ESM, Symantec SEP, Symantec Message labs, Thales encryption, Allgress, Forecpoint, Blue coat, Firepower, Cisco ISE, Carbon Black, Titus, Encase
• Strong oral, written, and presentation abilities.
• Experiance with M365 Copilot.
• Some experience with Unix/Linux system administration.
• Strong experience with logging and alerting platforms, including SIEM integration.
• Current understanding of Industry trends and emerging threats; and Working Knowledge of incident response methodologies and technologies.

Desirable

• Zscaler Certifications Associate and Professional for ZIA, ZPA and ZDX.
• Excellent Experiance in Zscaler ZIA, ZPA and ZDX.
• Experiance in Vulnerability Management Program.
• Experiance in Qualys Vulnerability Management Tool.
• Well-rounded background in network, host, database, and application security.
• Experience implementing security controls in a bi-modal IT environment.
• Experience driving a culture of security awareness.
• Experience administering network devices, databases, and/or web application servers.
• Professional IT Accreditations (CISM, CCSA, CCSE, JNCIA, CCNA, CISSP, CompTIA Security) Good to have.
  

Abilities

• Non customer facing role but an ability to build strong relationships with internal teams, and security leadership, is essential act as Incident co-ordinator, for reviewing all security tools, ingesting incident data, tracking incident status, coordinating with internal and external assets to fulfill information requirements, and initiating escalation procedures.
• Document daily work and new processes.
• Embrace a culture of continuous service improvement and service excellence.
• Stay up to date on security industry trends.