Job Location: Noida
Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.
Present in India since 1953, Thales is headquartered in Noida, Uttar Pradesh, and has operational offices and sites spread across Bengaluru, Delhi, Gurugram, Hyderabad, Mumbai, Pune among others. Over 1800 employees are working with Thales and its joint ventures in India. Since the beginning, Thales has been playing an essential role in India’s growth story by sharing its technologies and expertise in Defence, Transport, Aerospace and Digital Identity and Security markets.
Mission
S/he is part of Security Governance team. This team is in charge to oversee all the security topics related the business line MCS Digital Engineering & Services (DES) within Thales DIS GBU.
The mission of Security Governance unit encompasses a wide spectrum of security activities: steering corporate/GBU/BL programs, animating the BL security community, normalizing & consolidating the security best practices among different verticals in terms of processes and technologies. The Security Governance team takes also care of responsibilities coming from the vertical business: pre-sales activities, contracts review, products development supervision, operational external support to project teams.
Joining this team, the person will be part of a multidisciplinary working group formed by senior profiles with a consolidated experience in different security domains.
Location & Dimension
Location: Noida
Key responsibilities
- Actively contribute with other teammates working on corporate/GBU/BL governance programs
- Be an active member of different security communities in & out the BL
- Facilitate and support the implementation of new security processes/tools coming from outside the BL
- Ease the communication between the BL and external stakeholders (Central Security, CERT, CCoE, SSG…) on security topics
- Using a risk assessment approach, audit dev & ops tools and environments and propose accordingly a remediation plan
- Identify and carry on initiatives cross verticals but also external to the BL with the aim to create an added (security) value for the organization
- Lead such initiatives assuming a technical project manager role: understand the technical challenges and lead the program working with other stakeholders
- Develop, package, deploy and maintain security tools conceived within the framework of initiatives identified above
- Become THE security referent for DES developers community and the blueprint team
- Have a transversal vision across different verticals of the execution of the secure SDLC process
- Deal with developers and forge teams for security gates & controls applied to the CI/CD pipelines
- Gather and consolidate KSI (key security indicators) coming from the BL development life-cycle process
- Provide support to verticals & teams on SecOps topics
- Promote the security culture on DevSecOps and the GitOps within the BL
- Organize and lead awareness sessions on specific security topics
- Work occasionally on pre-sales activities supporting the verticals SSAs
Hard skills and technical expertise
Experience in working with Unix-based OS and CI/CD environments
- Linux/Unix OS and related service
- Programming or Scripting experience in Bash/Python/GO or any other equivalent
- Infrastructure as Code tools and technologies like Terraform/Cloudformation and Ansible/Chef
- Artefact Repositories like Sonatype Nexus, JFrog Artifactor
- CI/CD platforms (GitLab, Jenkins…) security hardening process
- Security tuning and customization of tool such as Fortify, Nexus IQ
- Security concepts & best practices related public clouds environments
- C ontainerization technologies as well as orchestrator solutions such as Kubernetes
Understanding of security concepts
- Security pillars: confidentiality, integrity, availability
- Data classification & information protection
- Data encryption in transit/at rest/in memory
- Secure communication: PKI, TLS, mTLS, S/MIME, VPN
- Cryptography: symmetric/asymmetric encryption algorithms and hash functions
- Secrets and credentials management
- Risk based security approach
- Secure SDLC, SCA, SAST, DAST
- Vulnerability management
- Linux/Unix OS security hardening
- Network security and protection: switching, routing, firewalling, ids/ips systems
Soft skills
- “Never stop learning” mindset
- Proactive
- Autonomous
- Adaptive
- Teamwork-er
- Critical thinker
- Trustworthy
At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!
Submit CV To All Data Science Job Consultants Across Bharat For Free
Leave a Reply