| Duties & Responsibilites : | Candidate will have experience in IT Security engineering and architecture, including hands on experience designing and deploying security solutions.
The candidate will report to the Information Security Unit and partner and collaborate with Information Security staff, the IT Enterprise Architect and IT staff to achieve a high-level of enterprise security and ensure that the design / implementation of all business solutions meet the security policies, standards and applicable compliance mandates. Strong knowledge in network security design, architecture and implementation.
Domain expertise in 3 or more of the following areas:
network security, network architecture and routing, Windows platform security, UNIX/Linux platform security, encryption, threat management, application security, database management / security, data governance, entitlements management, identity and access management, data loss prevention, PKI, authentication technologies.
Ability to perform systems security or vulnerability analysis and design is a must. Guiding development teams to address these security issues.
Knowledge of routing protocols; understanding of Network Layer concepts and technologies, packet-level understanding of basic TCP/IP protocols, understanding of VPN technologies to include GRE and IPSec.
Detailed understanding and configuration experience of routing, firewall and load balancing technical capabilities. Through knowledge of IPS/IDS and Web proxies.
Knowledge of application security, authentication and access management.
Current knowledge of security threats and security tools.
Hands on experience with ethical hacking and incident response.
Experience with Security Audit project such as PCI DSS.
Demonstrated ability to communicate at multiple levels from highly technical to business.
Abilitiy to identify, understand and communicate complex network and security issues effectively.
Understanding of XML, Java, dotnet and scripting tools.
Years of Relevant Experience: 10 plus years
Preferred Education: 4 year college degree or equivalent technical study and Security Certifications a plus (ie CISSP, CISM, GIAC, CRISC, CCNP/CCNA)
Knowledge of security management framework such as ISO 27xxx and OWASP
|
