JOB DESCRIPTION
Job Title : Cyber Security Engineer
Company : BDx Data Center Ltd.
Department : IT
Position Reporting to : AVP IT infrastructure
Location : Navi Mumbai
COMPANY OVERVIEW
Big Data Exchange (BDx), A leading Pan Asian hybrid, hyperscale and edge solutions provider with assets located in Hong Kong, Singapore, Guangzhou, Nanjing and expanding footprints in SEA regions.
Our hybrid ecosystem provides colocation, Enterprise Services, private cloud services, disaster recovery services , and interconnect solutions across cloud service providers, telcos, internet exchanges and major data centers.
We power digital transformations and sustainability as part of our core values to provide mission
critical infrastructure for Enterprise IT work loads. To find out more, please visit www.BDxworld.com
ROLE SUMMARY
The Security
lead will provide security incident response and readiness as part of a 24x7 Security Operations Centre within and in support of the IT Infrastructure and Operations team. Support global vulnerability management processes including OS and infrastructure patching, hardening and testing efforts. Operate security related tools (HIDS, NIDS, IPS, Analysers, Scanners, etc.) to identify active threats, attacks, vulnerabilities, exposures, etc., and prioritize for activity within the team. Assist in speedy identification of mitigation/remediation solutions
DUTIES AND RESPONSIBILITIES
1. Security Operations & Incident Response
2. Monitor and respond to security incidents within a 24x7 Security Operations Center (SOC).
3. Investigate, analyze, and mitigate security threats using SIEM, EDR, IDS/IPS, and SOAR solutions.
4. Develop and maintain incident response playbooks and security procedures.
5. Perform forensic analysis and root cause investigation for security breaches.
2. Vulnerability & Risk Management
6. Conduct regular Vulnerability Assessments (VAPT) and security audits.
7. Prioritize and implement security patches for OS, networks, and applications.
8. Support hardening efforts for IT systems and infrastructure.
3. Security Tools & Compliance
9. Manage and maintain security tools such as WAF, SIEM, DLP, IAM, and endpoint protection.
10. Ensure compliance with security frameworks like ISO 27001, PCI-DSS, and NIST.
11. Assist in security awareness training and best practices.
12. Support internal & external audits by providing necessary security documentation.
4. Threat Intelligence & Continuous Improvement
13. Identify emerging threats and attack vectors impacting enterprise security.
14. Recommend and implement mitigation strategies to enhance cybersecurity posture.
15. Collaborate with global security teams to align on security best practices.
QUALIFICATION & EXPERIENCE
Bachelor’s degree in Computer Science, Information Security, or related field. 5+ years of experience in cybersecurity, SOC operations, or IT Security. Strong knowledge of cloud security (AWS, Azure, GCP) and on-prem security. Experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies. Hands-on experience in penetration testing and vulnerability management. Familiarity with security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, etc.). Certifications such as CISSP, CISM, CEH, OSCP, or Security+ are a plus. Analytical mindset with strong problem-solving skills. Ability to work under high-pressure situations and respond to incidents in real time. Excellent communication skills to report security risks and incidents effectively. Proactive approach to identifying and mitigating security threats.
COMPETENCY AND BEHAVIORAL SKILLS (Use “E” to denote Essential and “D” for Desirable)
E- Bachelor’s degree in computer science, information systems, cyber security or a related field.
E- At least 5 years of relevant experience in cyber security
E- Knowledge of information technology operation (e.g. cloud, data, system, application and infrastructure, etc.)
E- Knowledge of cyber security assessment (e.g. security audit, vulnerability assessment, penetration testing, etc.)
E- Knowledge of cyber security product (e.g. End-Point Solution (EDR), WAF, DLP, SIEM, SOAR)
E- Knowledge of market best practice and framework (e.g. ITIL, ISO, PCI-DSS, NIST, etc.)
E- Certification in cyber security is an advantage (e.g. CISSP, CISM, CISA, ISO Lead Auditor, CEH, etc.)
D- Certification in project management and framework is an advantage (e.g. PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.)