Senior Security Analyst

About BNP Paribas Group:

BNP Paribas is a top-ranking bank in Europe with an international profile. It operates in 71 countries and has almost 1++ 000 employees. The Group ranks highly in its three core areas of activity: Domestic Markets and International Financial Services (whose retail banking networks and financial services are grouped together under Retail Banking & Services) and Corporate & Institutional Banking, centred on corporate and institutional clients. The Group helps all of its clients (retail, associations, businesses, SMEs, large corporates and institutional) to implement their projects by providing them with services in financing, investment, savings and protection. In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas enjoys leading positions in Europe, a strong presence in the Americas and has a solid and fast-growing network in the Asia/Pacific region.

About BNP Paribas India Solutions:

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, a leading bank in Europe with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 6000 employees, to provide support and develop best-in-class solutions.

About Businessline/Function :

Business Line / Function : CIB IT & Operations

Reports to Hierarchical : Sanket Sahadeo YERAM

Reports to Functional :

Grade : Senior Analyst / Technical Lead

Job Title:

Production CSIRT / Incident Response L2/3

Date:

4/11/2024

Department:

APAC Production Security

Location:

Mumbai/Chennai

Business Line / Function:

ITO – Production

Reports to:

(Direct)

Sanket Sahadeo YERAM

Grade:

(if applicable)

Senior Analyst / Technical Lead

(Functional)

Number of Direct Reports:

NA

Directorship / Registration:

NA

Position Purpose

APAC Production Security teams (based in Singapore and India) is covering multiple IT Security challenging tasks for BNP Paribas Asia Pacific region, such as:
• Production CSIRT / Logging & Detection
• Network Security
• Vulnerability & Compliance Security scanning
• Privileged Identity Management
• Designing & Implementation of Security solutions
• Production Support of Security solutions

The team in India is currently looking for an IT Security Professional, in order to reinforce its CSIRT Governance/Execution and Threat Hunting capability. The new joiner will improve the bank capabilities :
• To strengthen the governance and improve the CSIRT efficiency
• To participate as a Blue Team to security incident response and handle purple team exercises
• To detect APT (tool deployment, model update…)
• To reinforce the skills of the team on L2/L3 topics

In particular, the new joiner will work closely with APAC CSIRT and Threat Intelligence teams.

Finally, the new joiner will fully be part of the Production CSIRT / Logging & Detection team and will have the opportunity to expand the scope of activities within the team.

Responsibilities

Direct Responsibilities
• Gap Analysis on the Incident Respond Process compared to best practices
• Participate on the Incident Response mechanism and the development of new use cases in partnership with Logging And Detection Team
• Respond on Security Incident and provide accurate and efficient response
• Actively work on Threat Hunting methodologies, tools deployment and activities within and across BNP Paribas APAC, in close collaboration with Production and APAC CSIRT/CTI teams
• Identify and track advanced threats within the IT Production (being part of an exercise or not)
• Be a full time member of the Production CSIRT / Logging & Detection team and participate to the various activities of the team
• Participate in Red Team / Purple Team / Cyber Drill

Contributing Responsibilities
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System
• Enhancement and definition of the Incident Response framework within the Bank

Technical & Behavioral Competencies
• At least 5 years of experience in the IT Security field with at least 3 years of experience on Incident response as L2/L3
• Independent, self-motivated and innovative with good problem solving, interpersonal and communication skills, and can foster teamwork
• Strong understanding of cyber threat analysis models such as kill chain, MITRE Framework, etc and how they apply to both targeted and non-targeted threats
• Experience in common scripting languages such as Python, Ruby, LUA, PowerShell or BASH
• Experience on Operating Systems (Windows, UNIX)
• Strong understanding of common security products and technologies utilized in Enterprise environments (proxies, WAF, Firewalls, IDS/IPS, Anti-Malware, Endpoint, etc)
• Good Understanding of the OSI stack and the various protocols from layer 1 to 7 including SNMP, HTTP, VPN, DNS, etc.

Qualification
• University degree or equivalent in IT discipline (pref in IT Security)
• Professional credentials in one of the relevant IT Security disciplines
• SANS Certification is a plus

Specific Qualifications (if Required)

NA

Skills Referential

Behavioural Skills: (Please select up to 4 skills)

Ability to collaborate / Teamwork

Attention to detail / rigor

Critical thinking

Creativity & Innovation / Problem solving

Transversal Skills: (Please select up to 5 skills)

Ability to understand, explain and support change

Ability to develop and adapt a process

Ability to inspire others & generate people's commitment

Ability To Develop Others & Improve Their Skills

Ability to manage / facilitate a meeting, seminar, committee, training…

Education Level:

Bachelor Degree or equivalent

Experience Level

At least 3 years

Other/Specific Qualifications (if Required)

NA

About BNP Paribas Group:

BNP Paribas is a top-ranking bank in Europe with an international profile. It operates in 71 countries and has almost 1++ 000 employees. The Group ranks highly in its three core areas of activity: Domestic Markets and International Financial Services (whose retail banking networks and financial services are grouped together under Retail Banking & Services) and Corporate & Institutional Banking, centred on corporate and institutional clients. The Group helps all of its clients (retail, associations, businesses, SMEs, large corporates and institutional) to implement their projects by providing them with services in financing, investment, savings and protection. In its Corporate & Institutional Banking and International Financial Services activities, BNP Paribas enjoys leading positions in Europe, a strong presence in the Americas and has a solid and fast-growing network in the Asia/Pacific region.

About BNP Paribas India Solutions:

Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, a leading bank in Europe with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 6000 employees, to provide support and develop best-in-class solutions.

About Businessline/Function :

Business Line / Function : CIB IT & Operations

Reports to Hierarchical : Sanket Sahadeo YERAM

Reports to Functional :

Grade : Senior Analyst / Technical Lead

Job Title:

Production CSIRT / Incident Response L2/3

Date:

4/11/2024

Department:

APAC Production Security

Location:

Mumbai/Chennai

Business Line / Function:

ITO – Production

Reports to:

(Direct)

Sanket Sahadeo YERAM

Grade:

(if applicable)

Senior Analyst / Technical Lead

(Functional)

Number of Direct Reports:

NA

Directorship / Registration:

NA

Position Purpose

APAC Production Security teams (based in Singapore and India) is covering multiple IT Security challenging tasks for BNP Paribas Asia Pacific region, such as:
• Production CSIRT / Logging & Detection
• Network Security
• Vulnerability & Compliance Security scanning
• Privileged Identity Management
• Designing & Implementation of Security solutions
• Production Support of Security solutions

The team in India is currently looking for an IT Security Professional, in order to reinforce its CSIRT Governance/Execution and Threat Hunting capability. The new joiner will improve the bank capabilities :
• To strengthen the governance and improve the CSIRT efficiency
• To participate as a Blue Team to security incident response and handle purple team exercises
• To detect APT (tool deployment, model update…)
• To reinforce the skills of the team on L2/L3 topics

In particular, the new joiner will work closely with APAC CSIRT and Threat Intelligence teams.

Finally, the new joiner will fully be part of the Production CSIRT / Logging & Detection team and will have the opportunity to expand the scope of activities within the team.

Other/Specific Qualifications (if Required)

NA

Primary Location

IN-TN-Chennai

Job Type

Fixed Term

Job

INFORMATION TECHNOLOGY

Education Level

Bachelor Degree or equivalent (>= 3 years)

Experience Level

At least 5 years

Schedule

Full-time