Senior Security Analyst - 300522

About SirionLabs:

SirionLabs, a global SaaS company, is looking for people who are driven to make a difference.

Bringing together leading innovation, unrivaled Contract Lifecycle Management expertise, and a deep commitment to customer success, SirionLabs helps the world’s leading businesses contract smarter. SirionLabs’ AI-powered Smarter Contracting Platform brings legal, procurement, and business teams together to author stronger agreements, manage risk and strengthen counterparty relationships.

Today, analyst firms such as Forrester, Spend Matters, IDC and G2 agree that SirionLabs is a leader in CLM and world-leading businesses including Vodafone, Unilever, DHL, and BNY Mellon trust SirionLabs to create, control, and manage over 5m contracts worth more than $450b, in 80+ countries around the world. SirionLabs is backed by leading VC firms and has gone through a Series D round. SirionLabs is a 700+ people company with 9 offices globally.

Job Role: Senior Security Analyst

Years of Experience required: 7-10 Years

Work Location: Gurgaon

Responsibilities:

• Architect and Implement security controls in multi-cloud and multi-region hosted SaaS platform (AWS, Azure, Google)
• Architect and Implement security controls in corporate IT systems (Endpoints, Development & Data Center, etc.)
• Lead ongoing operational monitoring of effectiveness of implemented security controls and work with DevOps and Engineering teams to remediate or mitigate identified non-compliances and security weaknesses
• Design and implement Security Operation Center (SOC) plan
• Implement and administer/maintain Security Information and Event Management solution (Wazuh SIEM) along with ELK stack for log integration & management, correlation, security alert visualization and monitoring
• Integrate all IT systems (infrastructure, network, endpoints, application, database, security, etc.) with SIEM. Develop and implement necessary correlation rules, decoders, integration adaptors, threat feeds, etc.
• Implement automated and proactive security alert monitoring, alerting and response
• Develop and enhance threat hunting, SOAR and XDR capabilities
• Perform SOC operations - security monitoring, triaging, and incident response. Work closely with DevOps and Engineering teams to investigate, contain, remediate, or mitigate and respond to a security incidents.
• Create and maintain security incident response playbooks. Perform ongoing and scenario-based incident response testing. Incorporate learnings in incident response playbooks.
• Conduct ongoing Vulnerability Assessment & Penetration Testing (Internal and External) and perform management reporting. Work with DevOps and Engineering teams to remediate or mitigate identified security vulnerabilities. Administer security testing tools and environment.
• Responsible to ensure consistent implementation and maintenance of secure configurations, SOD based access controls and IT system hardening across the IT landscape. Conduct ongoing security audits/reviews in accordance with company policy and global security standards.
• Perform ongoing review of privileged user activities. Identify, investigate and respond to unauthorized access.
• Responsible for implementing and monitoring Patch Management process in all IT systems
• Perform Proof of Concept for security solutions to implement effective security controls
• Prepare metrics based periodic reports and dashboards with support from the stakeholder functions for management review
• Maintain good knowledge of current technology trends, evaluate new technologies and undertake training to strengthen IT skills as required

Educational qualifications and certifications:

Certifications: OSCP (preferred), Cloud Security Certification (Preferred), CCSP, CEH (at least two)

B.E / B.Tech (IT/ CS) / BSc (CS/IT) / MCA / MSc (CS/ (CS/IT) / BCA or postgraduate in (CS/IT)

Organizational skills:

• Self-driven and initiator
• Ability to multi-task effectively and work under pressure
• Ability to perform general mathematical calculations for the purpose of creating needs assessments, budgets, and forecasting.
• Ability to conduct research on latest security solutions and products as required.