Job Description

, IndiaJob Family Group: Information Technology (IT)Worker Type: RegularPosting Start Date: May 15, 2025Business unit: Projects and TechnologyExperience Level: Experienced Professionals:Whats the roleAs a Cyber Threat Prevention Advisor in the CyberDefence SecOps team, you'll join the Vulnerability team to manage and oversee vulnerability processes, ensuring they are trackable and measurable with robust tool support. Your team will lead the implementation of these processes within ServiceNow Security Operations (SecOps), establishing standard workflows and integrating them with IT service management processes executed by Line of Defence 1 within IRM. This role leverages market-standard tools and practices to streamline the architecture by reducing dependency on Collective.What youll be doingAsset Discovery:Set-up and lead adequate discovery of new Shell IT assets in Shell's legacy IT network, RES & Portfolio companies, Cloud environments and PCD and Retail environments.Ensure visibility in new areas such as Internet of Things and Cloud and investigate possibilities to keep track of IT assets.Automated Vulnerability Scanning:Maintain a portfolio of tools for automated vulnerability scanning with a focus on Business-Critical systems and systems that are available from the public Internet.Set-up regular scanning and make results available for further analytics in IRM investigation platform.Take appropriate action on vulnerabilities where required.Security Posture Reporting:Use the results from asset discovery, vulnerability scanning, penetration testing and attack simulation to provide an overview of vulnerabilities in Shell IT landscapes for different stakeholders including IRM LT and IDSO LT.Create specific reports for Business, Business Critical applications, IDSO service lines, External perimeters etc.Act as a Subject Matter Expert on implications of a vulnerability in an IT system and establishing the priority of applying security patches.Help creating prioritized overviews of Cyber vulnerabilities and putting these in a context of IT services and Business applications.Take mitigating actions coming out of identified threats or vulnerabilities either directly by the team or agree the actions with other parties in Shell.What you bringBachelors degree in Computer Science, Information Technology, or related field5-8 years of total experience in IT Security including at least 3-4 years of experience in Vulnerability AssessmentProficient in analysing network traffic using tools such as tcpdump or wiresharkStrong experience in using open-source scanning tools such as nmap, nessus, metasploit and/or commercial tools such as Rapid7 or QualysKnowledge in integrating Vulnerability Management into modern CI/CD Pipelines with 'shift-left' strategyUnderstanding of Network Security, Cloud Security, Endpoint Security, Application SecurityUnderstanding Cyber Threat Landscape and analyzing Threats from various sources. Assess new threats, rate threat per Shell ratings and collaborate with Threat team on new threat criticalityUnderstanding of CVE id / CVSS score and metricsFamiliar with application of Cybersecurity Benchmarks, NIST controls, PCI controlsLead security research proposals and Proof Of Concepts for Emerging Technologies and assessing Fit-For-Purpose Tools.Understanding of Cloud Security Posture Management (CSPM)Expertise in operating Application security tools like Rapid7 Appspider, NetsparkerKnowledge on CI/CD pipeline able to understand the integration of security tools and guide the developersUnderstanding of Application security design and providing guidance to developers on secure design. Good understating of SAST/DAST concepts and processKnowledge of Mobile DAST scanning and vulnerabilities and remediation consultationKnowledge of Splunk, SecOps VR, basic querying and creating dashboardsAdditional Skills (Good to have):PCI-DSS Compliance Scan.SecOps VR Module in ServiceNow.Linux environment experience.Azure/AWS Cloud Console.Wiz.io tool knowledge.Advanced Splunk skills.What we offerYou bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. Youll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. Youll be able to balance your priorities as you become the best version of yourself.Progress as a person as we work on the energy transition together.Continuously grow the transferable skills you need to get ahead.Work at the forefront of technology, trends, and practices.Collaborate with experienced colleagues with unique expertise.Achieve your balance in a values-led culture that encourages you to be the best version of yourself.Benefit from flexible working hours, and the possibility of remote/mobile working.Perform at your best with a competitive starting salary and annual performance related salary increase our pay and benefits packages are considered to be among the best in the world.Take advantage of paid parental leave, including for non-birthing parents.Join an organisation working to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply.Grow as you progress through diverse career opportunities in national andinternational teams.Gain access to a wide range of training and development programmes.We'd like you to know that Shell has a bold goal: to become one of the worlds most diverse and inclusive companies. You can get to know more about how we're working towards that goal, .-Shell in IndiaShell is a diversified energy company in India with 13,000 employees, and presence in Integrated Gas, Downstream, Power, Renewable and Upstream. Additionally, we have deep capabilities in R&D, digitalisation, and business operations.Our global strategy, Powering Progress, is designed to generate value for our shareholders, customers, and the wider society, and focuses on creating more value with less emissions. The strategy supports our purpose of providing more and cleaner energy solutions, with the aim of profitably transforming Shell into a net-zero emissions energy business by 2050. As India moves towards its target of net-zero emissions by 2070, Shell India aims to play a leading role in securing vital energy for today, while investing in, and helping to build, the energy system of the future through strategic investments in the country.Our Lubricants business serves over 50,000 consumers through a strong network of over 200 distributors, and operates an end-to-end value chain that spans conceptualization, development, and production at a world-class blending plant at Taloja. Through our 350-plus retail stations, we offer an integrated mobility experience including fuels, cafes, and convenience stores, with a prominent network of EV recharging facilities.Shell owns and operates a LNG re-gasification terminal at Hazira, Surat, with a capacity of 5 MTPA and a LNG truck-loading unit that plays a crucial role in helping meet Indias growing demand for gas across sectors. In 2022, Shell acquired Sprng Energy in a $1.55 billion deal to build an integrated energy transition business in the country. Sprng is a leading renewable energy company in India which develops and manages solar, wind, and hybrid power generation facilities and infrastructure.Our three capability centres across Bangalore and Chennai serve as a technology and innovation powerhouse for Shell globally, working as a delivery engine for core technical, digital, and finance processes: pioneering digital innovation and cutting-edge technologies across the energy sector. We also have strong academic partnerships and collaborations with leading universities and technology institutes to accelerate decarbonization efforts within the energy sector.We are committed to positively contributing to the communities in which we operate through programmes on STEM Education, Skilling, and Livelihood across India. We nurture and invest in startups developing initiatives focused on accelerating energy innovation through programs such as Shell E4 and Shell Eco-marathon. We also have strategic investments in new energy companies such as Husk Power, d.light, Orb Energy, and Cleantech Solar.DISCLAIMER: Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.

Shell