Role & Responsibilities :- Implement cybersecurity remediation activities across defined workstreams and sprint plans.- Configure and maintain identity and access controls including MFA, SSO, role-based access, least privilege, privileged accounts, service accounts, and periodic access reviews.- Support implementation of privileged access controls using tools such as Windows LAPS, PIM, managed identities, key vaults, or equivalent native security capabilities.- Execute vulnerability management activities including vulnerability scanning, findings validation, remediation tracking, and risk-based prioritization.- Implement and support patch management processes, including patch testing, deployment coordination, SLA tracking, and exception handling.- Configure centralized logging and monitoring integrations into SIEM platforms such as Microsoft Sentinel or equivalent tools.- Ensure critical infrastructure, applications, network devices, firewalls, SaaS platforms, and security tools generate usable logs for SOC monitoring.- Support SOC alert triage, incident investigation, escalation, evidence collection, and incident response playbook execution.- Maintain and update incident response plans, technical runbooks, communication workflows, and tabletop exercise evidence.- Implement backup and recovery controls, including immutable backups, scheduled backup validation, restoration testing, and recovery evidence documentation.- Build and maintain technical asset inventories, data inventories, network architecture diagrams,



and mappings to critical business processes.- Support network security improvements including firewall rule review, network access controls, network segmentation, IDS/IPS logging, and secure remote access.- Implement data protection controls such as encryption, data labeling, retention enforcement, DLP policies, and secure data handling controls.- Support secure development controls including secure code repositories, SDLC documentation, coding/testing standards, peer review processes, and separation of duties between development and deployment.- Coordinate with MSPs and internal IT teams for hands-on execution of patching, backup, monitoring, and endpoint security activities.- Produce control evidence, implementation documentation, dashboards, and remediation status updates for governance and audit purposes.- Support OT/ICS security implementation, including passive monitoring setup, asset-boundary validation, OT evidence packs, and coordination with O&M;/GOP providers where applicable.- Build and run passive OT monitoring pilots using tools such as Zeek, Suricata, Malcolm, or similar platforms where required.- Track assigned activities through sprint plans, maintain implementation notes,



and report progress against defined success measures.Candidate Profile :- Bachelors degree in Computer Science, IT, Cybersecurity, Engineering, or a related field.- 7 - 10 years of hands-on experience in cybersecurity engineering, IT infrastructure security, security operations, or security control implementation.- Practical experience implementing identity and access controls, including MFA, SSO, RBAC, least privilege, privileged access, service accounts, and access reviews.- Hands-on exposure to Microsoft security tools such as Entra ID/Azure AD, Intune, Defender, Sentinel, PIM, Key Vault, LAPS, or equivalent platforms.- Experience configuring SIEM/logging integrations, validating log ingestion, supporting SOC monitoring, and assisting with alert triage or incident investigation.- Valuable understanding of vulnerability scanning, patch management, remediation tracking, exception handling, and evidence collection.- Experience supporting backup validation, restoration testing, disaster recovery documentation, and incident response playbook execution.- Familiarity with network security concepts such as firewall logs, IDS/IPS, network segmentation, secure remote access, and endpoint protection.- Ability to translate cybersecurity control requirements into implementation steps, technical runbooks, evidence packs, and closure documentation.- Exposure to OT/ICS, SCADA, passive monitoring tools such as Zeek, Suricata, Malcolm, or regulated environments would be preferred. (ref:hirist.tech)

📌 Cyber Security Consultant - Security Control Implementation (Noida)
🏢 Crescendo Global Leadership Hiring India
📍 Noida