Senior Associate, Security Specialist - Identity & Access Management

Who We Are

Kyndryl is a market leader that thinks and acts like a start-up. We design, build, manage, and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers, and our communities.

The Role

Your Role And Responsibilities

• To collect error event & statistics and detect failure via the management tool.
• Monitor and ensure on the availability and fault detection on selected critical security components.
• Application Penetration Testing.
• Administer and provide Move, Add, Change on the security devices configuration.
• Maintain and manage security devices configuration version and required updates.
• Monitor security components availability by using management tool, alert end users when failure and to conduct corrective action plan for meeting the SLA.
• Infrastructure Vulnerability Assessment.
• Provide physical activities as per SOC direction to be performed at Customer site when there is incident or breach, or security threat detected by SOC.
• Provide regular report.

Who You Are

Required Professional and Technical Expertise :

• Security Operations Center (SOC): The specialist should have knowledge of SOC operations and be able to monitor security events and respond to security incidents.
• Compliance and Regulations: The specialist should have knowledge of relevant compliance and regulatory requirements such as PCI-DSS, HIPAA, GDPR, and ISO 27001.
• Information Security: The specialist should have a deep understanding of information security principles and practices, including risk management, threat analysis, vulnerability management, and incident response.
• Risk Management: The specialist should have expertise in identifying, assessing, and managing information security risks.
• Cybersecurity Best Practices: The specialist should have knowledge of cybersecurity best practices, including secure coding, secure configuration management, and security awareness training.
• Network Security: The specialist should have knowledge of network security technologies such as firewalls, VPNs, intrusion detection and prevention systems, and network access control.
• Incident Response: The specialist should have expertise in responding to security incidents, including malware infections, data breaches, and denial of service attacks.
• Certifications: Professional certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP)
• Communication Skills: The specialist should have strong communication skills to communicate technical information to non-technical stakeholders, collaborate with colleagues, and write technical documentation.
• Security Tools: The specialist should have experience in using security tools such as antivirus, firewalls, intrusion detection and prevention systems, vulnerability scanners, and security information and event management (SIEM) systems.
• Incident Management and Change Management: The specialist should have expertise in incident management and change management processes, including ticket management and reporting.

Preferred Professional And Technical Expertise

• Threat Intelligence: The specialist should have expertise in analysing threat intelligence to identify potential security threats and risks.
• Leadership Skills: The specialist should have leadership skills, including the ability to lead and manage a team of security professionals.
• Cloud Security: The specialist should have knowledge of cloud security, including secure configuration management, identity and access management, and data protection in cloud environments.
• Advanced Technical Skills: The specialist should have advanced technical skills in information security and related technologies, such as security testing tools, penetration testing, and ethical hacking.
• Vendor Management: The specialist should have expertise in vendor management, including the ability to manage relationships with third-party vendors and assess their security posture.
• Security Architecture: The specialist should have expertise in security architecture design and implementation, including the ability to design secure systems and implement security controls.
• Industry Knowledge: The specialist should have up-to-date knowledge of industry trends and best practices in information security.
• Professional Certifications: The preferred certifications for an IT Security Support Specialist include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and Certified Ethical Hacker (CEH).
• Continuous Learning: The specialist should be committed to continuous learning and professional development in the field of information security, through training, certifications, and other educational opportunities.
• Security Governance: The specialist should have expertise in security governance, including the ability to develop and implement security policies and procedures.
• Security Analytics: The specialist should have expertise in security analytics, including the ability to analyse security event data and identify trends and anomalies.
• Advanced Communication Skills: The specialist should have advanced communication skills, including the ability to communicate complex technical information to stakeholders at all levels of the organization.

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Our employee learning hub gives you access to the best learning in the industry to receive certifications and accreditations, including Microsoft University, AWS Cloud Center of Excellence, Udemy, and the Harvard Business Review. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you! We want you to succeed so that together, we will all succeed.

Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.