JD of Infosec R&D Architect

About FAI:

First American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies, a proud member of the FORTUNE 500 companies and was named one of FORTUNE’s 100 Best Companies to Work For® in 2024. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. FAI has been certified a Great Place to work by Great Place to work Institute®, is a certified Best Workplaces for Women and Workplace with Inclusive Practices.

Job Summary:

We are seeking a Research & Development professional for Information Security. The successful candidate will be a subject matter expert with hands-on experience in any of the following areas:

• Cyber Security
• Threat Intelligence
• Ransomware
• Malware
• Risk Assessment
• Vulnerability Analytics
• Identity management
• Zero trust network
• Phishing attacks
• Data Security
• Predictive modelling
• Intrusion Detection systems

The successful candidate can be based in Bangalore, Hyderabad or work remotely.

Competencies:

• Understand the current network, cloud and application setup.
• Research on existing and emerging threats
• Draw risk scenarios and recommended actions based on the threat landscape
• Present research findings, reports, advisories to Organization Management.
• Collaborate with Internal technology teams to make them aware and share best practices.
• Participate in developing cyber security architecture, roadmaps, strategies, business cases and remediation plans
• Perform advanced log analysis, forensics, malware analysis, network traffic and other related activities as needed to determine new attack scenarios.
• Evaluate new tools, processes, procedures and technologies for improving security posture and recommend best practices.
• Lead and drive initiatives to enhance internal knowledge based on threats.

Technical Skills

• The candidate must have a minimum of 2 years in R&D
• Area of R&D may include any of the following areas:
• "Just In Time" (JIT) workflow in Identity Access Management (IAM)
• Cloud-Native Application Protection Platform (CNAPP) - CSPM (Cloud Security Posture Management) , KSPM (Kubernetes Security Posture Management), CNAPP (Cloud-Native Application Protection Platform)
• Non Human Identity(NHI) or Non user account.
• ZTNA (Zero Trust Network Access) as part of SSE (Security Service Edge)
• Data security posture management (DSPM)
• SaaS (Software as a Service) security
• SOAR (security orchestration, automation, and response) Automation.
• User and Entity Behavior Analytics (UEBA)
• Cyber Security
• Threat intelligence
• Phishing attacks
• Network attack
• Network segmentation
• Identity access management
• Cyber defense
• Malware
• Ransomware
• Proven capability to create and improve the strategy threat areas
• Contributed to process automation, knowledge sharing, and training other members
• Expert capability to design and write scripts/programs from scratch using at least one programming language
• Experienced individual with the ability to write and present technical documents/blogs/reports/papers in management meetings
• Excellent analytical abilities and a strong ability to think critically
• A self-driven individual contributor who can take initiatives to get things done
• Strong verbal and writing skills
• Fluent English in reading, writing, and speaking