Responsibilities Job In Aptiv In India

Responsibilities

• Communicate vulnerability scanning requirements to internal engineering teams
• Oversee the implementation of security vulnerability management tools
• Technical support and troubleshooting issues to maintain existing vulnerability management tooling
• Review vulnerability scan reports
• Assess vulnerability severity
• Triage vulnerability tickets (assigning to appropriate teams)
• Shepherd vulnerability tickets through to completion/mitigation

Day-to-Day Activities

• Perform security risk assessments and report the findings with recommendations
• Hands-on experience on vulnerability scanning using tools like Tenable, Qualys etc
• Triage all findings reported from external sources like bug bounty and vulnerability disclosure program
• Liaise with internal compliance teams and perform appropriate scanning, testing, reporting and mitigation, to meet compliance requirements.
  
  
• Provide leadership and mentoring including technical and personal development for team members
• Maintain current knowledge of threat landscape, attacker techniques and mitigations
• Participate in crafting processes/practices, policies, tools, and partnerships to expand and mature the capabilities of the organization
• Identify vulnerabilities and work multi-functionally to implement countermeasures
• Monitor for new vulnerabilities reported by internal and external sources and identify the impacted assets.
  
  
• Research, classify, and score reported vulnerabilities
• Develop and report on substantial metrics for the Vulnerability Management Program

Required skills:

• Technical experience, ability to implement technical solutions by following vendor instructions
• Technical support, analysis of logs
• Problem solving experience to resolve technical issues
• Communication
• Some knowledge of code repositories and automation
• Are familiar with common Security vulnerabilities (OWASP Top 10, CWE Top 25)
• Have experience using Jira
• Can optimally drive the mitigation of security issues with other lively teams
• Are knowledgeable of different operating systems (Linux, Windows, MacOS)
• Experience with software development languages (ie Python, Ruby, etc).
  
  
• Are excited to champion security as an outstanding concern

Experience

• Bachelor's Degree in appropriate field of study or equivalent work experience
• 4+ years of experience as security Engineer
• 4+ years of experience in a medium to large d IT organization with a large cloud footprint
• Experience with Qualys Vulnerability Management
• Experience with security tools including Tenable, Tanium, AppSpider and BurpSuite.
  
  
• Strong experience using Linux operating system
• Experience with productivity tools including Microsoft Office Suite, Jira and ServiceNow
• Experience running and identifying zero day and other vulnerabilities on infrastructure and network, along with providing scope and remediation steps
• Experience with large network and web application vulnerability scanning and reporting
• Proven ability to work creatively and analytically in a problem-solving environment demonstrating teamwork, innovation, and excellence
• Self-motivated, decisive, with the ability to adapt to change and competing demands.
  
  
• Solid grasp of general information security concepts, techniques, and methodologies
• Solid grasp of vulnerability classification and scoring methodologies (CVSS, CWE)
• Working knowledge of Risk Management frameworks, Security frameworks & Data Protection regulations
• Strong understanding of desktop and server operating systems and software, including RedHat/CentOS Linux and Windows Server

Privacy Notice - Active Candidates: Aptiv is an equal employment opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law

Aptiv is looking for .

Aptiv is looking for Any Graduate / Post Graduate profile candidates.