Lead Security Analyst Job at Hewlett Packard Enterprise (Bangalore)

Information Security Lead Analyst

As part of Citi Infrastructure Defense team, the analyst position will participa...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

8+ years of experience with multiple security disciplines and strong understanding of layered defense concepts
Deep understanding of TCP/IP technologies and knowledge of network routing protocols
Experience defining enterprise security strategy and ecosystem across diverse products
Strong hands on experience with firewall and proxy technologies (Bluecoat, Squid, NGINX)
Large Scale Network and Security design experience is essential
Work with and understand regulatory and risk management requirements
Strong unix / linux experience
Scripting (Python/Perl/Bash)
University / College degree in any STEM area or equivalent industry/technology knowledge

Job Responsibility

Identify opportunities to automate and standardize information security controls
Resolve any vulnerabilities or issues detected in an application or infrastructure
Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
Scan and analyze applications with automated tools, and perform manual testing if necessary
Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
Direct the development and delivery of secure solutions by coordinating with business and technical contacts
Assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup

What we offer

Opportunity to work on the internal security posture for a large financial and thus shaping the industry overall
Exposure to a broad range of investment technology businesses and products
Access to our word class testing lab with physical hands on using hundreds of devices in the IT security ecosystem

Fulltime

Security Lead – Cloud & IT Security

HPE Operations is our innovative IT services organization. It provides the exper...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field
Minimum 10 years in IT security
At least 5 years in a leadership role
Proven track record in deploying and managing enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point)
Strong knowledge of cloud security for AWS, Azure, and/or Google Cloud
Experience with DDoS mitigation solutions (e.g., Cloudflare, Akamai, AWS Shield)
Experience with Burpsuite
Hands-on knowledge of SIEM, SOAR, EDR, and vulnerability management tools
Strong analytical thinking
Problem-solving ability

Job Responsibility

Develop and maintain the organization's IT security roadmap aligned with cloud and enterprise infrastructure
Lead security design reviews for new systems, services, and cloud deployments
Deploy, configure, and manage network security appliances including next-generation firewalls, IDS/IPS, and web application firewalls
Implement and maintain cybersecurity protocols, including endpoint protection, identity management, and access control policies
Design and operate DDoS protection mechanisms to ensure availability of critical systems
Implement and enforce security measures in public, private, and sovereign cloud environments
Monitor and audit cloud configurations to ensure compliance with industry standards (ISO 27001, NIST, CIS, etc.)
Lead threat modeling, risk assessment, and vulnerability management initiatives
Oversee incident detection, response, and recovery processes to minimize business impact
Ensure adherence to regulatory and compliance requirements such as GDPR, HIPAA, PCI-DSS

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

SOC Insider Threat Lead Analyst

SOC Insider Threat Lead Analyst position at Citi, responsible for monitoring, re...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

6+ years working in the security & operations fields
Bachelor's degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience
Excellent knowledge of network security, TCP/IP, various operating systems (Windows/UNIX), and web technologies
Ability to read and understand packet level data
Experience with user behavior analytics, DLP, IDS/IPS, firewalls, and host security products (HIPS, AV, EDR, etc)
Certifications from EC-Council, GIAC, or (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA]
Good communication skills with the ability to articulate clearly in high stress situations
Skills and proficiency with MS PowerPoint, Excel, Access or other analytical tools

Job Responsibility

Perform monitoring, research, assessment and analysis on alerts from various security tools
Recommend and review new use cases for insider threat monitoring
Follow pre-defined actions to investigate security incidents or perform incident response actions
Execute daily ad hoc tasks or lead projects as needed
Participate in or lead daily and ad-hoc conference calls
Create, update or provide process documentation, or provide requested evidence for compliance & controls requests

Fulltime

Senior Information Security Compliance Analyst

We're looking for a technically grounded Senior IS Compliance Analyst who speaks...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
and ability to read and understand security logs, configurations, and technical documentation
6+ years of total experience with significant time in GRC
Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
Experience developing and implementing information security policies and controls
ISO 27001:2022 Lead Implementer and Lead Auditor certification

Job Responsibility

Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

What we offer

health and welfare benefits
tuition assistance
401K savings and other retirement programs
employee assistance programs

Security & Privacy Analyst

The Security & Privacy Analyst will play a key role in protecting Spectrum.Life’...

Location

United Kingdom

Salary:

Not provided

Spectrum Life

Expiration Date

Until further notice

Requirements

Experience in information security, privacy, compliance, or a related field
Strong understanding of GDPR, data protection principles, and privacy best practices
Familiarity with security operations, vulnerability management, and incident response
Experience with security tools (e.g., SIEM, endpoint protection, logging platforms)
Ability to interpret risks and communicate them clearly to technical and non-technical audiences
Strong documentation, analytical, and problem-solving skills
Excellent attention to detail and commitment to quality
Experience in health-tech, clinical platforms, or handling sensitive health data
Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISSP, CIPP/E, or equivalent
Experience supporting audits or managing compliance frameworks

Job Responsibility

Monitor, assess, and respond to security alerts, incidents, and vulnerabilities across the technology environment
Support security operations activities including log analysis, threat detection, endpoint security, and access control management
Conduct regular vulnerability assessments and coordinate remediation with relevant teams
Assist in maintaining and improving security tools, controls, and frameworks (e.g., SIEM, IAM, MDM, KnowBe4, encryption standards)
Support third-party security reviews and due diligence assessments
Participate in business continuity and disaster recovery planning and testing
Support GDPR and other applicable privacy frameworks (e.g., ePrivacy, UK GDPR, HIPAA-aligned practices for clinical contexts)
Conduct Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs)
Assist in maintaining Records of Processing Activities (RoPA)
Review new product features and vendor integrations for compliance with privacy-by-design and security-by-design principles

What we offer

Full time permanent contract
Competitive salary (Dependent on experience)
In-office, remote or hybrid working options
25 days annual leave
24/7 EAP and a wide range of health and wellbeing supports
Extensive list of employee perks and benefits

Fulltime

Cyber Security-Fraud Analyst

The L2 Support Fraud Detection Senior Analyst is a pivotal team member responsib...

Location

India , Chennai

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Tools: Octoflow, Mosaic
conduct investigations and reporting using Octoflow and Mosaic platforms
provide recommendations based on analytics derived from these tools
support secure integration of APIs and web services within fraud detection platforms
liaise with developers to validate and enhance security features in applications
analyse and correlate logs using SIEM solutions to identify and remediate suspicious activity
respond to real-time alerts and participate in threat hunting operations
integrate threat intelligence feeds into operational systems
regularly update detection mechanisms in response to emerging risks
lead and document the resolution of escalated fraud incidents

Job Responsibility

Conduct investigations and reporting using Octoflow and Mosaic platforms
provide recommendations based on analytics derived from these tools
support secure integration of APIs and web services within fraud detection platforms
liaise with developers to validate and enhance security features in applications
analyse and correlate logs using SIEM solutions to identify and remediate suspicious activity
respond to real-time alerts and participate in threat hunting operations
integrate threat intelligence feeds into operational systems
regularly update detection mechanisms in response to emerging risks
lead and document the resolution of escalated fraud incidents
collaborate with cross-functional teams for swift containment, investigation, and recovery

What we offer

Inclusive and respectful work environment
positions open to people with disabilities.

Fulltime

Cyber Security Soc Analyst

The SOC Analyst (L1/L2) and Lead are responsible for proactive monitoring, detec...

Location

India , Chennai

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Strong knowledge of SIEM platforms and alert investigation
Advanced incident response, malware analysis, and RCA expertise
Deep knowledge of endpoint and network security tools
Threat hunting and forensic investigation capabilities
Familiarity with vulnerability management and DLP/email security
Experience with threat intelligence platforms and TTP mapping
Strong analytical, communication, and documentation skills
Guide development of SOC procedures/runbooks and continuous improvement initiatives
Administer DLP and email security systems
Operate Microsoft Defender for Endpoint, conduct threat hunting via EDR telemetry and memory dumps

Job Responsibility

Proactive monitoring, detection, investigation, and response to security threats using industry-leading solutions
Guide and architect SOC workflows and systems to ensure robust organizational security
Threat hunting and forensic investigation
Administer DLP and email security systems
Operate Microsoft Defender for Endpoint, conduct threat hunting via EDR telemetry and memory dumps
Use, configure, and optimize SIEM tools (Splunk, IBM QRadar, Microsoft Sentinel, LogRhythm, ArcSight, Elastic SIEM) for threat identification and alert management
Guide development of SOC procedures/runbooks and continuous improvement initiatives
Leadership and team management

What we offer

Inclusive and respectful work environment
Positions open to people with disabilities

Fulltime

Security Operations Analyst I

Our Security Operations Analyst I position supports our Virtual Network and Secu...

Location

United States , North Wilkesboro

Salary:

Not provided

InfusionPoints

Expiration Date

Until further notice

Requirements

AS/BS degree in Information Technology, Computer Science, Engineering or related field
1-3 years of hands-on deep technical experience
Security analysis, threat hunting, forensics, flow analysis, and log management experience
IDS/IPS management, PCAP carving, file extraction, and long tail analysis experience
Strong understanding of attacker tactics, techniques, and procedures
Understanding of endpoint and network security
Experience with or knowledge of vulnerability management and penetration testing of systems, applications, and networks
General understanding of industry standards, compliance, and legal guidelines: ISO 27001, FedRAMP, NIST 800-171, NIST 800-53, SOC 2, and HIPAA
Self-starter able to drive towards goals and manage time effectively
Analytical and the ability to think on the fly

Job Responsibility

Perform event and incident triage, threat hunting, and incident response
Use industry-leading commercial and open source software to detect, evaluate, triage, prioritize, and respond to security events
Support research and development, security module creation, automation, and process improvement
Support vulnerability management and penetration tests
Write both technical and executive incident reports when called upon
Continuous learning and improvement of security analysis skills to match current technical security challenges and innovations

What we offer

competitive compensation and benefits package

Fulltime

Select Country

Lead Security Analyst

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?