Key Responsibilities

Data Encryption & Key Management: Deploy, configure, and maintain Thales CipherTrust Manager (CM), Transparent Data Encryption (TDE), CipherTrust Application Data Protection (CAKM), CipherTrust Transparent Encryption (CTE), and Hardware Security Modules (HSMs) using KMIP protocols across enterprise sites.

PDF

Database & File Monitoring: Administer IBM Guardium and Imperva Database Activity Monitoring (DAM) and File Activity Monitoring (FAM), including S-Tap agent installations, collector configurations, and policy enforcement.

PDF

Compliance & Governance: Implement and lead ISO27001 control frameworks, conduct risk assessments, and prepare evidence to support PCI DSS, GDPR, and statutory financial compliance audits.

PDF

Endpoint & Data Loss Prevention: Manage Data Loss Prevention (DLP) tools like Safetica, alongside endpoint protection solutions (Heimdal, Microsoft Defender), ensuring policy compliance across corporate devices.

PDF

Security Operations & Monitoring: Monitor SIEM platforms (FortiSIEM), analyze EDR/DLP alerts, perform triage, and drive rapid incident response and vulnerability patch management.

PDF

Network & Perimeter Security: Configure and maintain WAF, IPS/IDS, Active Directory, firewalls, and IPSec VPN tunnels to secure enterprise perimeter connectivity.

PDF

Vulnerability Assessment: Conduct security posture evaluations, vulnerability assessments, and red team testing using tools such as Nessus, BurpSuite, Nmap, and Kali Linux.

PDF

Cross-Functional Collaboration: Partner with network, cloud, and infrastructure teams to design encryption policies, deliver technical security demonstrations, and maintain solution stability.

PDF

Required Technical Skills

Encryption & Key Management: Thales CipherTrust Manager (CM), TDE, CAKM, CTE, HSMs, KMIP.

PDF

Database Security: IBM Guardium (DAM/FAM), Imperva DAM, S-Tap agent deployment, Guardium policy creation.

PDF

Security & Network Tools: FortiSIEM, Safetica DLP, Heimdal, Microsoft Defender, Firewalls, VPN config, WAF, IPS/IDS.

PDF

Assessment & Evaluation: Nessus, BurpSuite, Nmap, Netcat, Kali Linux.

PDF

Platforms & Systems: Azure Security, Office 365, VMware, Linux, Active Directory, IAM, Power BI.

• PDF

.