Qualifications

● Bachelor’s degree in computer science, systems analysis or a related study, or equivalent experience. ● CISSP (certified with Endorsement phase fully completed). ● 5+ years of demonstrable experience spanning at least four different CISSP domains. ● Experience working with Compliance programs like PCI-DSS or SOC2. ● Strong understanding of defense-in-depth strategies and implementation of technical controls across the entire organization, with ability to assess gaps and risks around computing systems and operations. ● Experience developing and adopting information security and governance standards, policies and procedures. ● Experience in conducting successful vulnerability assessments across various infrastructure tiers, including penetration testing, scanning and remediation activities. ● Experience in cloud native technologies, especially around Kubernetes, and cloud environments is a must. ● Strong understanding of networking concepts, protocols and architectures. ● Strong understanding of security concepts around PKI, TLS and encryption. ● Experience using network and security assessment tools – both at host and at network tier. ● Experience with IAM, SSO, RBAC, and other AuthN/AuthZ management technologies. ● Familiarity with CVE databases, vulnerability scoring systems (e.g., CVSS), and security industry standards such as ISO 27001 and NIST. ● Strong proficiency in Linux/Unix based operating systems, Python programming language and Shell scripting. ● Other industry standard certifications like CISA, CISM, CGRC and CRISC are a plus. ● Experience as a team lead is a plus.