Principal Information Security Engineer

Stelle nicht auf LinkedIn

🕒 vor 2 Tagen

🇮🇳 Indien – Remote

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 11%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 2 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 55 Tagen besetzt.
• Kein Gehalt angegeben.

Jetzt Bewerben

Deinen Lebenslauf-Score prüfen

Lebenslauf + Anschreiben anpassen

Ähnliche Remote-Jobs finden

☆ Speichern☑️ Als beworben markieren❌ Ausblenden

Problem melden

First American (India)

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 1994

🛡️ Versicherung

💼 Beratung

🏥 Gesundheitswesen

💰 €450.000.000 Post-IPO Debt - First American im 2024-09

Insurance • Consulting • Healthcare

First American (India) ist ein Global Capability Center (GCC) der First American Financial Corporation, das Softwareentwicklung, Daten- und Analyseleistungen, Backoffice- und Wissensverarbeitungsdienste zur Unterstützung von Titelversicherungen, Abwicklungsdiensten, Hypothekenlösungen und damit verbundenen Risikomanagement-Operationen in den USA, Großbritannien, Australien und Kanada anbietet. Mit Standorten in Bangalore, Hyderabad und Salem liefert FAI Corporate-IT- und Produktionsdienstleistungen für das Mutterunternehmen und betont eine menschenorientierte Kultur, die als Top-Arbeitsplatz anerkannt ist.

Beschreibung

• Design, implement, and maintain Splunk infrastructure, including Splunk and Cribl upgrades • Support Cribl onboarding using REST API, S3 collectors, HEC, and related methods • Implement and support multi-cloud infrastructure deployments • Enable efficient data routing, parsing, and filtering • Apply data warehousing, real-time data processing, and data normalization concepts • Collect, analyze, and correlate logs using SIEM and data management platforms • Lead SIEM detection engineering by developing and fine-tuning correlation rules, alerts, and dashboards • Expand data engineering practices using advanced analytics and machine learning for proactive threat detection • Participate in the purple team lifecycle with offensive and defensive security teams • Automate SIEM and data management operations • Collaborate with cross-functional teams to mitigate security risks and vulnerabilities • Audit security configurations, policies, and procedures for compliance • Monitor current security trends, tools, and best practices • Provide guidance and support to security engineers • Perform operational on-call support and ad hoc duties outside normal work hours as required

🎯 Anforderungen

• Extensive experience with SIEM and data management platforms, particularly Splunk and Cribl, including deployment, configuration, optimization, administration, and functional use • Experience with Cribl onboarding using REST API, S3 collectors, HEC, and related tooling • Strong understanding of network protocols, firewalls, intrusion detection systems, endpoint security solutions, and Azure, AWS, and GCP • Demonstrated ability to deploy, configure, and secure infrastructure in Azure, AWS, and GCP • Proficiency in Python, PowerShell, or Bash; AWS Lambda and Azure Functions experience is a plus • Strong understanding of MITRE ATT&CK • Hands-on experience developing, tuning, and deploying SIEM security detections • Excellent analytical skills for complex engineering issues • Knowledge of COBIT, NIST 800-53, ISO27001, SSAE16, SOC1, and SOC2 • Proficiency in Microsoft Word, Excel, PowerPoint, and Visio • Strong verbal, written, and presentation skills • Ability to manage multiple high-priority projects and tasks • Ability to work collaboratively in a team-oriented environment • Generally requires a bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field, or equivalent work experience • Minimum of 10 years’ information security experience, focused on SIEM, data management, and security operations • Relevant certifications such as Splunk Certified Power User/Admin, Cribl Certified Admin, Security+, CEH, OSCP, or CISSP • Experience using Cursor, ChatGPT, or similar AI platforms is good to have • Familiarity with Azure DevOps is good to have • Familiarity with APIs, syslog, forwarders, cloud integrations, and security or observability data sources • Experience with IT service management, change management, and vulnerability remediation workflows • Familiarity with cloud platforms, containers, or infrastructure-as-code

🏖️ Vorteile

• Equal Opportunity Employer • Inclusive workplace committed to respecting, supporting, and inspiring all individuals • Diversity and inclusion practices • Potential operational on-call support based on business needs

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen