Lead Cybersecurity - Application Vulnerability jobs at Att in India, Hyderabad

:

• Minimum of 6 years of experience in Certificate Management.
• Strong background in managing and troubleshooting the certificate Key Pairs, Including Public and Private Keys.
• Solid understanding of Identity and Access Management (IAM) and Apache/Tomcat best practices, and a passion for staying up to date with the latest industry trends in performing the SSL handshakes.
• Strong analytical and problem-solving skills, with the ability to troubleshoot and resolve Certificate related issues.

Technical Skills & Responsibilities:

• Experience with Certificate Tools : Proficiency in using certificate management tools such as Keyman.
• Certificate Management: Strong knowledge of certificate lifecycle management, including issuance, renewal, and revocation.
• Deep Understanding of Certificate Key Pairs : Expertise in managing and troubleshooting certificate key pairs, including public and private keys.
• Automation of Certificate Management : Ability to automate certificate management processes using tools like Ansible/Custom Scripts.
• Certificate Installation : Installing and configuring certificates using automation tools, ensuring seamless integration with existing systems.
• Inventory Maintenance : Maintaining an accurate inventory of all certificates, ensuring timely renewals and compliance with security policies.
• Certificate Configuration : Configuring and managing SSL/TLS certificates for ISVA/Tomcat servers, ensuring secure communication.
• Automating Certificate Renewals : Developing and implementing automated workflows for certificate renewal to minimize downtime and enhance Security.
• Certificate Discovery and Monitoring : Implementing and managing tools for discovering and monitoring certificates across the network to ensure no certificate goes unnoticed or expires unexpectedly.
• Compliance and Reporting : Ensuring compliance with industry standards and internal policies by generating regular reports on certificate status and usage.
• Incident Response : Developing and maintaining procedures for responding to certificate-related incidents, such as compromised keys or expired certificates.
• Collaboration: Collaborate with stakeholders to gather and understand business requirements and translate them into technical specifications.
• Provide technical guidance and support to team members.
• Ability to work both independently and in various team settings.
• Ability to work under pressure with a strong sense of setting priorities.
• Flexible to accommodate time-zones as teams are geographically dispersed.
• Collaborate with cross-functional teams, including IT, Security, and Compliance, to ensure alignment and integration of security processes within the IAM Platform.

Preferred

• Collaborate with cross-functional teams, including IT, Security, and Compliance, to ensure alignment and integration of security processes within the IAM.
• Experience in Creating/Installing/Renewing and Revoking the Server/Wildcard Certificates.
• Expertise in managing and troubleshooting certificate key pairs, including public and private keys.
• Ability to automate certificate management processes using tools like Ansible/Custom Scripts.
• Ability to provide hands-on support and troubleshooting of the Certificate related issues.

Skills

• Strong Experience in Certificate Management tools like IBM Keyman, Ansible, ISAM, Configuring and Managing SSL/TLS Certificates on ISVA and Tomcat/Apache, Python.

Preferred / Nice to have:

• IBM Security Access Manager Certified Engineer

IAM Tools Certified Engineer

Location:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

Job Description:

Roles and Responsibilities:

.•Design, code, test, debug and document new and existing components to ensure that software meets business, quality and operational needs
• Work with portfolio stakeholders, Solution and Enterprise Architects, to develop, analyze, split, and realize the implementation of features & enablers
• Build high quality code following unit testing and test-driven development
• Establish critical NFRs at the solution level, participate in the definition of others
• Drive and participate in code and document reviews
• Collaborate with peer organizations, dev ops, support organizations on technical issues and provide guidance
• Interpret and translate business needs to technical requirements and accurate estimates
• Evaluate and recommend tools, technologies and processes to ensure the highest quality and performance is achieved
• Work with team to troubleshoot code level problems quickly and efficiently
• Apply deep technical expertise to resolve challenging programming and design problems
• Focus on scalability, security and availability of all applications and processes
• Contribute to the design and architecture to enable secure, scalable and maintainable software

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems or related field.

• 10+ years of experience in working in Engineering or Development roles

• 6+ years of progressive experience in one or more of the following areas: application delivery; subject matter expertise in building Java-based high-volume/high-transaction applications

• 6+ years of experience building web applications using Java, Spring and REST

• 4+ years of experience in performance tuning and application monitoring

Preferred Qualifications

• 4+ years of experience in architecture and design of systems using Micro services architecture

• 4+ years of experience in a leadership capacity - coaching and mentoring engineers, developers

• 2+ years of experience in cloud technologies: AWS, Azure, OpenStack, Docker, Kubernetes, Ansible, Chef or Terraform

• 2+ years of experience in build and CICD technologies: GitHub, Maven, Jenkins, Nexus or Sonar

• 4+ years of experience in Unit and Function testing using Junit, Spock, Mockito/JMock, Selenium, Cucumber, SoapUI or Postman

• Proficiency in Unix/Linux command line

• Expert knowledge and experience working with asynchronous message processing, stream processing and event driven computing.

• Experience working within Agile/Scrum/Kanban development team

• Familiarity with HTML5, JavaScript frameworks, and CSS3

• Certified in Java, Spring or Azure technologies

• Excellent written and verbal communication skills with demonstrated ability to present complex technical information in a clear manner to peers, developers, and senior leaders

Technical Skills

Java/Groovy, Spring, REST services, NoSql technologies (Cassandra), Kafka/MQ/Rabbit, Redis/Hazelcast, ELK, Prometheus/Grafana, Git, Jira, Jenkins, Docker, Kubernetes, Node.js, React.js, Python, R, Azure, Cosmos DB, Event Hub

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

About AT&T Chief Data Office

Candidates will:

• Work on cutting-edge Cloud Technologies, AI/ML, and data-driven solutions, be a part of a dynamic and innovative team driving digital transformation.
• Lead high-impact Agile initiatives with top talent in the industry.
• Get opportunity to grow and implement Agile at an enterprise level.
• Offered competitive compensation, flexible work culture, and learning opportunities.

Shift timing (if any):12.30 to 9.30 IST(Bangalore)/1:00-10:00 pm (Hyderabad)

Hybrid (3 days mandatory in office)

Roles and Responsibilities

• Create product roadmap and project plan.
• Design, develop, and maintain scalable ETL pipelines using Azure Services to process, transform, and load large datasets into Cloud platforms.
• Collaborate with cross-functional teams, including data architects, analysts, and business stakeholders, to gather data requirements and deliver efficient data solutions.
• Design, implement, and maintain data pipelines for data ingestion, processing, and transformation in Azure.
• Work together with data scientists/architects and analysts to understand the needs for data and create effective data workflows.
• Exposure to Snowflake Warehouse.
• Big Data Engineer with solid background with the larger Hadoop ecosystem and real-time analytics tools including PySpark/Scala-Spark/Hive/Hadoop CLI/MapReduce/Storm/Kafka/Lambda Architecture
• Implementing data validation and cleansing techniques.
• Improve the scalability, efficiency, and cost-effectiveness of data pipelines.
• Experience in designing and hands-on development in cloud-based analytics solutions.
• Expert level understanding on Azure Data Factory Azure Data Lake, Snowflake, Pyspark is required.
• Good to have exp in full Stack Development background with Java and JavaScript/CSS/HTML.
• Knowledge of ReactJs/Angular is a plus.
• Designing and building of data pipelines using API ingestion and Streaming ingestion methods.
• Unix/Linux expertise; comfortable with Linux operating system and Shell Scripting.
• Knowledge of Dev-Ops processes (including CI/CD) and Infrastructure as code is desirable.
• PL/SQL, RDBMS background with Oracle/MySQL
• Comfortable with microServices, CI/CD, Dockers, and Kubernetes
• Strong experience in common Data Vault data warehouse modelling principles.
• Creating/modifying Dockers and deploying them via Kubernetes.

Additional Skills Required:

The ideal candidate should have at least 14+ years of experience in IT along in addition to the following:

• Having 10+ years of extensive development experience using snowflake or similar data warehouse technology
• Having working experience with dbt and other technologies of the modern datastack, such as Snowflake, Azure, Databricks and Python,
• Experience in agile processes, such as SCRUM
• Extensive experience in writing advanced SQL statements and performance tuning.
• Experience in Data Ingestion techniques using custom or SAAS tool
• Experience in data modelling and can optimize existing/new data models
• Experience in data mining, data warehouse solutions, and ETL, and using databases in a business environment with large-scale, complex datasets

Technical Qualifications:

Preferred:

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Experience in high-tech, software, or telecom industries is a plus.
• Strong analytical skills to translate insights into impactful product initiatives.

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

About AT&T Dynamic Defense

AT&T Dynamic Defense™

To learn more about AT&T Dynamic Defense™, click here:

To view SecureIQLab report on AT&T Dynamic Defense™, click here:

About the Role:

Our Dynamic Defense function is seeking for a Cyber Security domain expert for leading and managing a team of 10+ experienced security engineers and programmers in AT&T India that develop and support security services on top of AT&T’s connectivity platforms such as Fiber, Mobility and Internet.

Roles & Responsibilitiesinclude:

• Lead and manage a team of experienced Developers and Network Security engineers who design and certify an intent based network that embeds security into AT&T’s ADI, ASEoD, Fiber and Mobility services, by leveraging our programmable network.
• The leader in this role implement security controls, policies and standards that reduce cyber risks and increase security controls for AT&T’s dynamic defense customers.
• Lead and drive ideation, testing, proof of concept and support for various cyber productization in AT&T's core telecom network.
• Analysis of complex security issues and the development and engineering activities to help mitigate risk.
• Analysis of various hardware and/or software solutions to determine unit cost, efficacy and speed of mitigation.
• Develop policies and procedures to minimize network intrusion, malware events and vulnerability issues for internal and external customers. Applies measures to block malicious code and applications.
• Includes forward looking research, planning and strategy to strengthen our stance against future cyber security threats and enhance our mitigation techniques and technology solutions.
• Areas of work include, but are not limited to: Network security cyber incident Response, cyber product development & testing, cyber risk & strategic analysis, cyber research, cyber awareness & training, cyber vulnerability detection & assessment, cyber intelligence & investigation, cyber networks & systems engineering, cyber security application testing, cyber forensics analysis, cyber software assurance, cyber application development & testing, cyber IoT planning & testing, cyber policy, requirements & standards.
• The leader in this role oversees, manages and supports day-to-day operations, including various projects, tasks and initiatives
• Continuously collaborates with US and India Cyber Security leadership teams and other stakeholders on engineering and operational matters in Dynamic Defense function
• Supports innovation, strategic planning, technical proof of concepts, testing, lab work, and various other technical program management related tasks associated with the designated functional areas.
• The individual in this role interviews and selects employees, maintains proper staffing levels, allocates resources, supervises teams daily operations, productivity, identifies areas for improvement, develops action plans to improve performance, develops teams technical and managerial expertise through on-the-job and formal training opportunities, enforces Company policies, takes necessary disciplinary action, evaluates individual performance for annual performance review, merit increases, promotions and other employment status changes, and conducts long-range planning for the team.

Primary / Mandatory Skills:

Overall – 15+ years of IT experience

• 8+ years of engineering and operationalization experience in the areas of Cyber Security, Network Security
• 7+ years of progressive experience and track record of building successful cyber applications.
• 5+ years of technical team management experience
• Deep understanding of network security dealing with firewalls, routing and switching (such as Juniper router, Cisco routers, Palo Alto Firewall, Juniper SRX Firewall, Cyber risk, Access control lists, BGP route controls and router protection techniques)
• Track record in leading development teams building security tools and applications.
• Deep understanding of network and cyber based attacks and threats
• Deep understanding of Cyber Security frameworks, methodologies, and industry best practices
• Track record of staying current with trends, techniques, tools, and processes that drive improvement of Cyber Security posture
• Ability to asses and articulate risks from a business standpoint.
• Sense of urgency and attention to detail
• Operate in a fast-paced, dynamic, and geographically matrixed teams.
• Flexible to provide coverage in US morning hours
• Information security credentials CISSP, SANS certifications (such as GMON / GCIA / GDSA ), or equivalent
• Demonstrate Analytical Thinking
• Understanding of Business Process Modeling
• Finance and Accounting Financial Forecasting and Modeling
• Proven ability to manage Processes and projects
• Understanding of agile practices
• Team-oriented thinking with demonstrated ability to produce high-quality work
• Bachelors / Masters in Cyber Security and / or Computer Science

Technical Skills: Cyber security, Network Security, Security Engineering and Operations, Product Development

Additional information (if any): Flexible to provide coverage in US morning hours.

Certification: CISSP, SANS certifications (such as GMON / GCIA / GDSA), or equivalent

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

About the Job:

8+ years

Roles and Responsibilities:

• Responsible for analyzing event data to discover threats and other security issues, patterns and trends.
• Research, analyze and interpret both what is and what is not contained in the security event data.
• Recommend remediation measures for security issues / threats discovered.
• Recommend areas for further study and research pertaining to the observations.
• Serve as an additional point of contact for security issues / events, working with the stakeholders to deliver on the request. This position may sometimes be the primary contact when issues arise outside United States working hours.
• Be proactive and demonstrate the ability to analyze issues, generate ideas, and initiate action while achieving results.
• Effectively manages multiple tasks / projects with close attention to detail and meets short turnarounds and deadlines.

Primary / Mandatory skills:

Overall – At least 8+ years of experience in Cyber Security focused on security / threat research, analysis, and investigation.

• Broad understanding of cyber security fundamentals and concepts
• Hands-on experience with networking protocols such as TCP, IPv4 / IPv6 and others
• Hands on experience in performing research, analysis and investigation using open source and proprietary tools
• Scripting experience (Python and Bash)
• Experience working in an environment where coordination with multiple teams is essential to success
• Ability to prioritize individual/group work in a high-activity and time-bound environment
• Flexible to provide coverage in US morning hours on a need-basis, and as required
• Strong written, verbal and presentation skills

Desirable skills:

• Industry certifications such as CEH, CISSP, SANS and/or other relevant certifications
• Bachelors or Masters in Computer Sciences Engineering
• Experienced in performing Data analysis with JSON
• Experience in Linux command line

Technical Skills:Threat research, analysis and investigation leveraging open source and proprietary tools, TCP, IPv4 / IPv6, Scripting - Python, Bash

Flexible to provide coverage in US morning hours on a need-basis, and as required.

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

Job Description:

Roles and Responsibilities:

.•Design, code, test, debug and document new and existing components to ensure that software meets business, quality and operational needs
• Work with portfolio stakeholders, Solution and Enterprise Architects, to develop, analyze, split, and realize the implementation of features & enablers
• Build high quality code following unit testing and test-driven development
• Establish critical NFRs at the solution level, participate in the definition of others
• Drive and participate in code and document reviews
• Collaborate with peer organizations, dev ops, support organizations on technical issues and provide guidance
• Interpret and translate business needs to technical requirements and accurate estimates
• Evaluate and recommend tools, technologies and processes to ensure the highest quality and performance is achieved
• Work with team to troubleshoot code level problems quickly and efficiently
• Apply deep technical expertise to resolve challenging programming and design problems
• Focus on scalability, security and availability of all applications and processes
• Contribute to the design and architecture to enable secure, scalable and maintainable software

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems or related field.

• 10+ years of experience in working in Engineering or Development roles

• 6+ years of progressive experience in one or more of the following areas: application delivery; subject matter expertise in building Java-based high-volume/high-transaction applications

• 6+ years of experience building web applications using Java, Spring and REST

• 4+ years of experience in performance tuning and application monitoring

Preferred Qualifications

• 4+ years of experience in architecture and design of systems using Micro services architecture

• 4+ years of experience in a leadership capacity - coaching and mentoring engineers, developers

• 2+ years of experience in cloud technologies: AWS, Azure, OpenStack, Docker, Kubernetes, Ansible, Chef or Terraform

• 2+ years of experience in build and CICD technologies: GitHub, Maven, Jenkins, Nexus or Sonar

• 4+ years of experience in Unit and Function testing using Junit, Spock, Mockito/JMock, Selenium, Cucumber, SoapUI or Postman

• Proficiency in Unix/Linux command line

• Expert knowledge and experience working with asynchronous message processing, stream processing and event driven computing.

• Experience working within Agile/Scrum/Kanban development team

• Familiarity with HTML5, JavaScript frameworks, and CSS3

• Certified in Java, Spring or Azure technologies

• Excellent written and verbal communication skills with demonstrated ability to present complex technical information in a clear manner to peers, developers, and senior leaders

Technical Skills

Java/Groovy, Spring, REST services, NoSql technologies (Cassandra), Kafka/MQ/Rabbit, Redis/Hazelcast, ELK, Prometheus/Grafana, Git, Jira, Jenkins, Docker, Kubernetes, Node.js, React.js, Python, R, Azure, Cosmos DB, Event Hub

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

About the Role:

Key Responsibilities:

• Design, build, and sustain secure, high-quality Java applications and REST APIs leveraging Spring Boot and Spring MVC frameworks.
• Construct and execute tests using JUnit to ensure application reliability and integrity.
• Work with MySQL databases, including writing complex queries and optimizing performance.
• Utilize JSP and JQuery for front-end development and dynamic web page creation.
• Troubleshoot and resolve software defects and issues.
• Stay up to date with emerging technologies and industry trends.

Required Skills:

• Overall 12 or more years of hands-on experience in Java/Spring Boot/Spring MVC development.
• Strong knowledge of MySQL database management and query optimization.
• Proficiency in JUnit for unit testing.
• Experience with JSP and JQuery for front-end development.
• Solid understanding of object-oriented programming principles.
• Familiarity with Git, Maven
• Excellent problem-solving skills and attention to detail.
• Strong communication and teamwork abilities.
• Knowledge of RESTful APIs and web services.
• Familiarity with Agile development methodologies.
• Bachelor’s degree in computer science, Information Technology, or a related field.

Desired Skills:

• Understanding of cyber security fundamentals and concepts
• Good understanding of networking protocols such as TCP, IPv4 / IPv6 and others
• Knowledge of scripting languages such as JavaScript, Python and Shell.
• Understanding of cyber security fundamentals and concepts
• Flexible to provide coverage in US morning hours on a need-basis, and as required
• Strong written, verbal and presentation skills
• Experience working in an environment where coordination with multiple teams is essential to success
• Ability to prioritize individual/group work in a high-stress and time-bound environment

Time Type:

AT&T is a fair chance employer and does not initiate a background check until an offer is made.