The Data Encryption Analyst is responsible for collecting the required information and provide guidance to the application teams on use of secure encryption algorithms and ciphers for data-in-transit as well as data at-rest to protect sensitive information.
The person preferably has hands-on experience in configuring TLS, including tasks like obtaining a certificate from a trusted CA, installing it on the system, defining cipher suites, and ensuring proper TLS handshake.
Prior experience with managing encryption key management, including implementing policies, monitoring compliance, and ensuring secure handling of cryptographic materials, is preferred.
Required Skills:
Strong analytical and problem-solving skills with attention to detail. Ability to analyze complex datasets and extract meaningful insights.
Understanding of difference between data encryption in transit, at rest and in use and respective techniques.
Understanding of information security principles, frameworks, and best practices. Experience in analyzing security logs, events, and incident data to investigate and resolve encryption-related incidents and anomalies.
Hands-on experience in analyzing large volumes of data in Excel and other data sources.
Excellent verbal and written communication skills for effective collaboration and reporting; ability to convey technical information to non-technical stakeholders.
Experience in working with application development and support users to help them understand data encryption requirements and implement them.
Nice to Have:
Knowledge of Cryptology, PKI and TLS.
Familiarity with scripting languages (e.g., Python) for data manipulation and automation.
Familiarity with data privacy, data classification and compliance standards.
Working knowledge of AWS services.
Certifications in information security.
Understanding of storage data lifecycle management policies.
Understanding of Symmetric and Asymmetric encryption and applicable use cases
At least 3 years of experience in data encryption algorithms, protocols, and key management, and data masking practices.