Summary :

The Data Security Expert is responsible for designing, implementing, and managing infra & data security measures to protect the end-to-end platform and client data. The role involves security strategy development, security framework implementation, compliance adherence, and handling security incidents.

Overall Responsibilities :

- Develop and implement comprehensive data security frameworks following standards, and best practices.

- Design secure architectures and frameworks to protect end-to-end data platform, infrastructure, from secure access from internal and external systems/applications/users.

- Conduct risk assessments and vulnerability analyses to identify potential threats and weaknesses..

- Collaborate with Cloud, IT, DevOps, Data engineer, API developers, and client security teams to understand security requirements and implement required security frameworks into workflows and systems..

Technical Responsibilities

- Experience securing Azure cloud environments by implementing Azure IaaS solutions.

- Set up and Configure Azure services like VNET, subnets, load balancers, app gateways

- Ensure isolation between environments (Dev, Test, prod)

- Implement NSGs, route tables, and custom DNS, private link.

- Setup and establish App Gateway WAF rules to handle inbound/outbound traffic.

- Implement mechanisms to handle different security issue categories and scenarios

- Implement and ensure security of Azure services including Key-Vault, storage layers etc.

- Conduct risk assessments and vulnerability analyses to identify potential threats and weaknesses.

- Experience with scripting languages (e.g., Python, PowerShell, or Bash) for security automation.

- Familiarity with DevSecOps practices and tools like Jenkins, Ansible, or Terraform.

- Ensure compliance with industry standards and regulations such as GDPR, CCPA, HIPAA, PCI DSS, and ISO 27001.

- Conduct penetration testing, and system hardening activities to ensure the system is secured and meeting client expectations.

- Create detailed documentation of security policies, incidents, and remediation steps.

- Strong knowledge of data encryption, hashing, tokenization, and secure data transmission protocols

- Preferably having certification in Microsoft Certified : Azure Security Engineer