Description :

Project description

You'll be working in the Firewall & Zone Security Authority team in Pune. We ensure that all firewall rules are audit and risk compliant, thus securing our cyber defenses to the benefit of all segments in the organization.

This is an excellent opportunity for a strong team player with high level of understanding of automation and development in security-related issues, and to join a world-class team within the Technical Information Security Office.

Responsibilities :

- Firewall Rule Lifecycle development and automation of tools for compliance, reporting against firewall rules using Tufin suite and in-house tools

- Automation and maintenance of tools related to firewall policy housekeeping processes

- Develop, maintain, and automate tools and scripts that support the following functions:

- Gathering and processing large amounts of data regarding Firewall Rule Lifecycle from various tools and platforms through APIs

- Auditing of Firewall changes for completeness and correctness, and ensuring rules are compliant with the architecture design and policies

- Execute post-change reviews for firewalls, performing quality checks, and reporting to management and project teams

- Assist with firewall and network housekeeping projects with expertise

- Pre-change reviews and approvals

Skills :

Must have :

- At least 3 to 5 years of IT Security / Information Security experience, ideally in a development role supporting tools and processes of a large organization.?

- Programming experience: Python (scripting for data gathering and processing, input validation, network communication with APIs; web-portal/application development (Django/Python).

- Server management experience: Linux, web server & database deployment and maintenance, backup solutions, scheduling.

- Experience working with tools for collaboration and version control (GitHub).

- Knowledge of security processes in a large organization.

- Ability to communicate IT security issues to other business areas in technical and non-technical language.

Nice to have :

- Knowledge of Tufin SecureTrack and SecureChange, as well as their respective APIs is an advantage

- Knowledge of AI is an advantage