- Become an expert in technology stack to understand points of weakness and opportunities for security solutions.
- Assist in monitoring IT control setting to identify key risks, related controls and gaps, document and report results to management.
- Assist with third party vulnerability testing process; document and report results to management.
- Collaborate with internal stakeholders on addressing systemic security issues.
- Perform monitoring of security tools and oversee remediation of items identified.
- Proactively identify threats and vulnerabilities, and collect, correlate, and analyze data to detect actual or potential security related incidents, and ensure timely remediation by the applicable party.
- Identify, implement, and maintain the controls and procedures required to cost effectively and uniformly protect company s information system assets.
- Monitor, track, and document information security related incidents to ensure a prompt and efficient resolution.
- Provide support and evidence collection for internal and external audits and risk assessments.
- Consults with management to assist with developing corrective action plans for identified audit, risk, Information Security, and IT findings.
- Research, design, and participate in or lead the implementation of security initiatives.
- Stay current on the latest information technology and security trends; recommend corrective actions as identified and needed through Information Security initiatives.
- Assist in developing wide best practices for IT and Information security.

Primary Skills :

- 4-6 years of experience with design, testing, development, migration & integration within a medium to large organization.




- Experience conducting vulnerability scans and validating scan data across workstation, server, network, and peripheral devices.
- Operational experience with Vulnerability scanning, Incident Response, Endpoint Detection and Response, Monitoring and Logging including hardware refresh, software testing, software upgrades, and complex troubleshooting techniques.
- Current experience in security threats, solutions, security tools and network technologies along with a keen ability to diagnose and troubleshoot technical issues.
- Proven knowledge of core AWS products and services (e.g. VPC, EC2, S3, RDS, ELB, ALB, WAF, Lambda), AWS (Iaas & Paas Components).
- Proficiency is one or more programming languages (Python, Java, Go etc.)
- Proficiency in both Windows and Linux architectures
- Hands-on experience with vulnerability scanning tools: for example, tools such as Qualys, Rapid7 -Nexpose, or Tenable - Nessus, etc.
- Hands-on experience with EDR tools: for example, tools such as Tanium, Crowdstrike, Cisco AMP, McAfee, etc.
- Working knowledge of network monitoring, management, and analysis tools such as, Splunk, Loggly, Kibana, or similar.
- Experience with deployment orchestration, automation, and security configuration management (Jenkins, Puppet, Chef, Cloudformation, Terraform, Ansible) preferred.
- Ability to utilize a variety of tools like Stash, Git, Nexus, Jenkins, Gradle, Groovy, YML, and AWS security capabilities (WAF, GuardDuty, Security Groups, IAM, etc)
- Familiarity with configuration baseline standards such as CIS Benchmarks or DISA STIGs.
- Strong communication and presentation skills
- Certifications such as CISSP, GSEC, CEH etc. (nice to have)

📌 Sr. SecOps Engineer (Thiruvananthapuram)
🏢 Reflections Info Systems
📍 Thiruvananthapuram