Senior Information Security Engineer; CyberArk

Position: Senior Information Security Engineer (CyberArk)
Location: Bengaluru

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:
Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired

Qualifications:

Minimum 3+ years implementation and administration experience in working on large, complex Cyber Ark environments.
. Bachelor's or master's degree in technology /Engineering.
. Strong knowledge of PAM Cyber Ark tool / Cyber Ark PAS Vault, DR, CPM, PVWA, AAM, PTA and Alero.
. 3+ years of credential management expertise and advanced management of credential management systems.
. 3+ years Credential/secrets management experience in a cloud or Dev Ops environment
. Advanced Information Security technical skills and understanding of information security practices and policies.
. 3+ years of Windows and Linux based OS administration experience
. 2+ years of experience with automating workflows (Java, Power Shell, VBScript, Shell, etc.)
. Ability to manage complex issues and develop solutions.
. Excellent Written and oral communication
.

Experience with databases (Oracle, Sybase, MSSQL, MySQL etc.,)
.

Experience with Directories (LDAP, AD)
.

Experience with Jira and Confluence
. Documentations of technical configuration
.

Experience with Security Event and Incident Management (SEIM) Tools like Splunk
.

Experience with load balancers, high availability solutions and firewalls
.

Experience with certificate management tools like Venafi
. Cyber Ark certification will be an added advantage.

Job Expectations:
Design, document, test, maintain, and partner with peer teams to deploy solutions for highly complex security solutions related to credential management.
. Troubleshoot and resolve service requests and automation issues (Bug/fixes/connectors)
. Have a Strong knowledge of the Cyber Ark privileged account security Suite.
. Integrating various platforms with Cyber Ark, such as Windows servers, UNIX Servers, Databases, SAP Applications, Websites, and networking devices etc.,
. Conduct proactive monitoring to prevent solution outages.
. Onboard privileged access accounts
. Onboard applications to Cyber Ark
. Enhancements and developments for plugins/connectors
. Identity new areas of risk and evaluate existing data security policies.
. Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity.
. Perform integration testing for new features and integration of new asset types.
. Safe creation/modification/removal, including sage membership.
. Schedule and run regular technical changes (i.e., service enhancements, security patches, major…