*Job Title : Sr. Java Developer /Architect with Security experience*
*Location : Willow Grove PA* *Duration : 12+ Months Contract* *Interview mode : Phone & Inperson interview* *Rate : 70/ hour C2C* *Need Certification on CISSP or CSM .* *Description:* Strong J2EE, EJB, MQ Series, Web Services/REST, Oracle 12. Maven/Jenkins/Sonar. Solid understanding of OWASP standards. This is a hands on Java Developer/architect role that will work on the Compass Team and interface with UHG Security. Candidate will need to have hands on Java, Rest Svcs, Strong middleware background, Soap Restful, MQ messaging. Will need to review the testing reports in Fortify, facilitate any code changes. work with Architects to ensure code security issues are taken care of. Should be familiar with Siteminder and how it interfaces with the web server. Must be able to understand Application Roadmap. *Must have skills:* • 6 or more years of experience providing technical leadership and operational support for complex enterprise security projects/programs for large enterprise organizations • 6 or more years of experience in network/applications/database security architecture, engineering, and technical oversight for large enterprise systems with PII/PHI/PCI/FISMA related data flows • Experience conducting and applying threat modeling to large and complex and virtualized architectures • Knowledge of infrastructure, application, and data security architecture best practices • Fluency with IT governance standards including NIST, COBIT, ISO 27001, OCTAVE, ITIL • Experience complying with regulatory guidance at the State and Federal level to include but not limited to SOX, HIPAA, HITRUST, GLBA, PCI-DSS, CMS/HHS and/or CFR Part 11 • Experience executing security architecture processes within agile methodologies. • Specific experience leading security programs from requirements through implementation. • Experience working with large tier security vendors leading RFI/RFP’s • Experience with analyzing, troubleshooting, and investigating security-related, information systems' anomalies based on security platform reporting, network traffic, log files, host-based and automated security alerts. • Experience with some or all of the following: TCP/IP | OSI Model, system logs (WMI, syslog, etc.), antivirus, IDS/IPS, packet analysis, configuration standards, Group Policy, Vulnerability analysis, Event Correlation, Forensics, IDS/IPS rule sets and signature creation, web application security, pen-testing, reverse engineering, Honeypots, IOC, advanced threat detection, code analysis. Data Loss Prevention (DLP), Log Indexing and Correlation platform, Network Access Control (NAC), Physical access control systems ------------------------------ Umang Agarwal *Sr.Technical Recruiter* *SriMatrix Inc* 1255 West 15th Street, Suite 815 Plano, TX 75075 *A Certified Minority & Woman Owned Business Enterprise (MWBE)* Ph No: 732-902-0873 *um...@srimatrix.com <parit...@srimatrix.com>* *Privacy Policy* | Under Bill 1618 Title III passed by the 105th USA Congress this eMail cannot be considered as spam as long as we include our contact information and an option to be removed from our eMailing list. If you have received this message in error or, are not interested in receiving our eMails, please reply with *Remove/Unsubscribe* in subject line of this eMail and we will Remove your email from our list immediately . -- You received this message because you are subscribed to the Google Groups "US_IT.Groups" group. To unsubscribe from this group and stop receiving emails from it, send an email to us_itgroups+unsubscr...@googlegroups.com. To post to this group, send email to us_itgroups@googlegroups.com. Visit this group at https://groups.google.com/group/us_itgroups. For more options, visit https://groups.google.com/d/optout.