System Security Engineer

Seeking a new challenge where your professional and personal aspirations are not only possible but supported? Kaufman Rossin might be just the place for you! 

Kaufman Rossin Professional Services Private Limited’s (the “Company”) offices are located in the World Trade Center (WTC) in Bangalore, Karnataka, India, and at Udyog Vihar, in Gurgaon, Haryana, India. 

The Bangalore office provides a range of services, including risk management, corporate governance, tax, assurance, and family office services. Out of the Gurgaon office, we render highly specialized back-office alternative investment services for global hedge funds and related fund types. As one of the top accounting firms in the US, our foundation is “people first”. In the words of James Kaufman, one of our founders, “We prioritize our people, their development, and their well-being. Our values are translated into action every day." 

Kaufman Rossin, headquartered in Miami, Florida has been celebrated as the Best Place to Work in South Florida more than a dozen times. The firm has grown to over 700 employees, with offices spanning the tri-county area and sister entities, Kaufman Rossin Wealth and Kaufman Rossin Alternative Investment Services. 

The Firm is ranked 49th among the top 100 firms in the US by Inside Public Accounting 2023. Internationally, the Firm has offices in Bangalore and Haryana in India and the Ivory Coast in Africa.

• Administers, operates and monitors KRs information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host-based security tools)
• Collaborates with IT to identify, evaluate and recommend new security technologies for suitability within KR's environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts
• Creates and updates security documents - policies, processes/procedures, playbooks, etc.

• Experience with endpoint protection technologies such as Anti-Virus, Endpoint Detection and Response, and Insider Threat platforms
• Experience with network protection technologies such as IDS/IPS and inspection tools, core technologies like Identity Access Management tools, SIEM and SOAR platforms
• Experience with Linux and Windows operating systems, enterprise SIEM, and packet capture analysis toolsets
• Familiarity with MSFT SharePoint and other collaborative tools, controls/control measures as it relates to Cybersecurity technologies (CIS, NIST CSF, NIST 800-53, CSA) and compliance and governance (PCI, SOX, GLBA, COBIT)
• Scripting and programming language skills (Python, PowerShell, Java, JavaScript)
• Understanding of the tactics, techniques, and procedures (TTPs) used by threat actors against endpoints, such as MITRE ATT&CK techniques
• Strong written and verbal skills, and highly organized
• Effective interpersonal skills, work well with business stakeholders to understand the short-term and long-term business needs
• Proven ability to work in a team-oriented, collaborative environment
• Knowledge of regular expressions and at least one scripting language (PERL, Python, PowerShell)

• Bachelor's or equivalent experience (certificates)
• 7-10 yrs. of cybersecurity experience
• 3-4 years. of recent operational security experience (Security Operations Center (SOC), Security Engineering / Administration, Incident Response, Malware Analysis, IDS/IPS Analysis, etc.)
• One or more security related certifications, such as:
• Certified Information Systems Security Professional (CISSP), GIAC, GCIH
• Certified Information Security Manager (CISM)
• Certified Information Systems Audit (CISA) certification
• Certified Ethical Hacker (CEH)
• Vendor certifications on products and technologies (ex. MSFT, Crowdstrike, Mimecast,OKTA, DUO, etc.)