Hi,
Hope you are doing well!!
I have an urgent requirement with one of my clients. Please find the job details below and forward me your updated resume along with your contact details at Rewa.s@noviainfotech.com.
Job Title: Netwrix / Stealthbits Security Engineer
Location: Remote — Must be available to work Eastern Time (ET) hours
Job Type: Contract (12+ Months)
Experience Required: 8–10 Years
Primary Skills:
Netwrix Auditor, Stealthbits, IAM, Active Directory, Windows Server, Data
Access Governance
Job Description:
We are seeking an experienced Security Engineer with proven, hands-on experience managing and administering Netwrix Auditor and Stealthbits security products. The ideal candidate will have a strong background in identity and access management, data access governance, Active Directory security, permission auditing, and security compliance.
The candidate will be responsible for deploying, configuring, maintaining, and optimizing Netwrix and Stealthbits platforms to monitor data access, identify security risks, investigate suspicious activity, and support least-privilege access enforcement.
Strong engineering knowledge of Microsoft Active Directory, Microsoft Entra ID, Windows Server, NTFS permissions, file shares, and NAS storage auditing is essential.
Mandatory: Candidates must have genuine, hands-on experience with both Netwrix and Stealthbits products. General IAM, cybersecurity, or Windows administration experience alone is not sufficient.
Key Responsibilities
1. Netwrix and Stealthbits Platform Management
- Deploy, configure, administer, and maintain Netwrix Auditor and Stealthbits solutions.
- Monitor platform health, troubleshoot issues, and optimize product performance.
- Configure auditing, monitoring, reporting, and access analysis capabilities.
- Support platform upgrades, configuration changes, and operational maintenance.
- Investigate product-related issues and coordinate resolutions with internal teams or vendors.
2. Data Access Governance and Permission Analysis
- Analyze data access patterns using Access Analyzer and relevant platform capabilities.
- Identify excessive permissions, unnecessary access rights, and potential data exposure risks.
- Assess NTFS permissions, shared folder permissions, and NAS storage access.
- Recommend and support remediation activities to enforce least-privilege access.
- Collaborate with IT and security teams to validate and remediate access-control findings.
3. Identity and Directory Services Security
- Monitor and audit changes across Microsoft Active Directory and Microsoft Entra ID.
- Investigate unauthorized changes to users, groups, privileged accounts, and directory configurations.
- Identify suspicious privilege escalation and unauthorized access activity.
- Support identity governance and access-control improvement initiatives.
- Maintain visibility into identity-related security events and directory changes.
4. Activity Monitoring and Threat Detection
- Monitor changes and access activity across Active Directory, file servers, and supported cloud environments.
- Investigate anomalous behavior, unauthorized data access, and suspicious permission changes.
- Analyze audit trails and security events to determine potential risks.
- Document findings and coordinate incident investigation and remediation activities.
- Support continuous improvement of security monitoring and detection processes.
5. Compliance, Auditing, and Reporting
- Generate and maintain automated audit reports supporting applicable compliance requirements.
- Support audit evidence collection for GDPR, HIPAA, PCI-DSS, and other relevant regulatory frameworks.
- Maintain accurate audit records and documentation.
- Assist with internal and external audits by providing evidence of access monitoring and control effectiveness.
- Communicate identified compliance gaps and recommend corrective actions.
6. Windows Infrastructure and Automation
- Administer and troubleshoot Windows Server environments supporting security and auditing platforms.
- Support IIS and SQL Server backend components associated with the relevant solutions.
- Develop PowerShell scripts to automate data collection, reporting, administrative tasks, and remediation activities.
- Troubleshoot infrastructure, connectivity, configuration, and performance issues.
- Collaborate with infrastructure, IAM, and cybersecurity teams to maintain reliable platform operations.
Required Skills and Qualifications
Mandatory Platform Expertise
- Demonstrated hands-on administration and engineering experience with Netwrix Auditor.
- Demonstrated hands-on administration and engineering experience with Stealthbits products.
- Practical experience configuring auditing, monitoring, access analysis, and reporting capabilities.
- Ability to troubleshoot platform issues and implement remediation actions.
- Experience with Access Analyzer or relevant Stealthbits access governance functionality.
Identity and Access Management
- Strong engineering knowledge of Microsoft Active Directory.
- Experience with Microsoft Entra ID.
- Understanding of identity lifecycle, access governance, privileged access, and least-privilege principles.
- Experience auditing directory changes, group membership, permissions, and privileged access.
Data Security and Infrastructure
- Deep understanding of NTFS permissions, shared folder permissions, and NAS storage auditing.
- Proficiency in Windows Server administration.
- Working knowledge of IIS and SQL Server backend management.
- Experience investigating access violations, permission changes, and suspicious activity.
Scripting and Automation
- Hands-on PowerShell scripting experience.
- Ability to automate data collection, reporting, auditing, and remediation tasks.
- Strong troubleshooting, analytical, and problem-solving skills.
Professional Experience
- 8–10 years of overall relevant experience.
- Practical experience managing Netwrix and Stealthbits products in enterprise environments.
- Ability to work independently in a remote engagement.
- Availability to work during Eastern Time Zone business hours.
Preferred Qualifications
- Netwrix Certified Professional certification.
- CISA, CISSP, or relevant Microsoft Security certifications.
- Experience in financial services, healthcare, or other highly regulated enterprise environments.
- Familiarity with vendor risk assessment, cybersecurity governance, risk, and compliance (GRC).
- Experience supporting IAM professional services and enterprise security remediation initiatives.
|
|
Rewa
Yadav |
E: Rewa.s@noviainfotech.com |
You received this message because you are subscribed to the Google Groups "NoviaJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to noviajobs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/noviajobs/CAJQxN34hBQLTJv5u3Gx_27t1RR1h706QUZB7dpGooZbTpaM0vA%40mail.gmail.com.
No comments:
Post a Comment