Duck Creek Technologies Hiring for Security Operations Engineer Ii at Mumbai, Maharashtra, India Full Time

Job Description

SUMMARY The Security Operations Engineer II a senior team member in Security Operations, as part of the Duck Creek Information Security team that analyzes, designs, implements, monitor and evaluate the security system which protect Duck Creek’s computer systems and data. Responsible for the support of Duck Creek’s information security operations, assisting in the implementation and operations of best in class controls and processes supporting both internal and external security. The Security Operations Engineer II is expected to stay up to date and may mentor team members on the latest intelligence, including hackers’ methodologies in order to anticipate security breaches, threats, computer viruses or attacks by cyber-criminals. ESSENTIAL JOB FUNCTIONS/RESPONSIBILITIES

• Supports the Duck Creek’s information security operations, assisting in the implementation and operations of best in class controls and processes supporting both internal and external security requirements.
• Leverages standard security frameworks, manages the ongoing operations of the information security management system
• Participates in the design of server, appliance, desktop, laptop and mobile device security configuration standards to protect systems from compromise
• Participates in the implementation of network firewall, intrusion detection/prevention, data loss prevention and network access control solutions to ensure the protection of Duck Creek’s networks
• Provides Tier 2 support for Duck Creek’s secure remote access solutions for employees, third parties and clients
• Provides Tier 2 support for cryptography controls for data at rest and data in motion including systems, databases and data connections between systems and applications
• Works with relevant business entities to establish and support processes to support the Secure Development Lifecycle for Duck Creek applications including management of tools and resources for inspecting code for vulnerabilities and security weaknesses
• Works with staff across the business to establish standards for disaster recovery requirements and developing and implementing related architecture supporting business continuity needs for both internal and external systems and services
• Assists in the implementation of standards and supporting architecture to provide the monitoring of Duck Creek systems through the acquisition and correlation of logs focusing on security events resulting in alerts on security incidents
• Works across the organization to establish and maintain a strong set of information security policies based on organizational business model, recognized standards and regulatory requirements, including processes for evaluating and approving policy exceptions
• Participates and acts as subject matter expert in the technology risk assessment process with the goal of ensuring alignment with the organizations risk tolerance and risk profile
• Supports the development and execution of the employee security training program, educating all employees on existing policies, standards and processes. To include targeted training to higher risk employees
• Additionally, supports the delivery of awareness material on a periodic and ad hoc basis as needed, providing actionable information to employees on existing and emerging threats
• Assists business continuity and disaster recovery testing efforts across the business
• Supports and monitors regulatory and compliance requirements
• Supports the delivering metrics as required by the CISO and assisting in the creation of periodic and ad hoc reporting as required by management and clients.
• Supports the Attack and Penetration testing program that provides management and clients with results of simulated attacks against internal systems and on-demand systems and services
• Provides Tier 2 support of technology and processes for the security operations center, leveraging dedicated and third-party resources to collect and analyze events from all technology assets as appropriate, identify and analyzing security related incidents and providing incident response capabilities to include forensics as needed and post-mortem analysis and reporting for critical incidents
• Provides Tier 2 support of the network security architecture to include firewalls, intrusion detection/prevention, content filtering, network access control, and related network-based controls
• Incorporates advanced threat detection, threat intelligence and security automation capabilities into control environment to provide incident response capabilities for internal and on-demand environments to include incident classification, escalation and response planning and execution
• Provides insight in on complex design development or significant system enhancements; takes a broad perspective to identify innovative solutions to complex technical issues
• Responsible for supporting best in class security architecture and standards for the suite
• Primarily works independently, with ongoing guidance as appropriate
• May lead moderately sized functional teams or projects
• Recognized as a subject matter expert in own discipline
• Continues education in the information security domain
• Perform other related duties and activities as required.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. QUALIFICATIONS/REQUIREMENTS Education and Work Experience:

• Bachelor’s degree, or higher education level, or foreign equivalent, in Information Security, Computer Science or related degree;
• CISSP Certification or equivalent
• Total Relevant Work Experience: Minimum 8 Years

• Product/Industry Experience: Minimum 5 Years
• QA Skill Domain Experience: Minimum 7 Years
• Management Experience: Minimum 2 Years

Specialized Knowledge, Skills, and/or Abilities:

• Requires specialized depth and/or breadth of expertise in particular process/discipline
• Awareness of current and emerging security risks and cyber threats
• Advanced understanding of concepts related to the several information security domains
• Continual education in the information security domain
• Advanced understanding of concepts related to the several information security domains
• Subject matter expert in numerous areas of the skill group team
• Heavy focus on skill growth
• Exceptional time and priority management skills to drive expected outcomes, balancing overall business objectives with scope, budget and resource priorities
• Strong project management skills with the ability to manage several large projects at the same time, keeping them on scope, on budget and on time
• Requires analytical skills with the ability to solve complex problems
• Self-starter and requires minimal direction from leadership
• Ability to present and effectively communicate within the suite
• Flexible with the ability to multi-task, effectively prioritize and work under pressure
• Advocate of Continuous Improvement and industry recognized Best Practice

Other Requirements:

• Travel: 0-10%
• Work Authorization: Legally authorized to work in the country of the job location.
• Physical : Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.