Posted in Cisco Networking & IT Security, Jobs on August 30, 2010
• Design security solutions, architecture specifications, policies, procedures and standards and coach others on security-related disciplines.
• Facilitate, perform and review internal control structures and tests to assess compliance with company, legal and regulatory mandates.
• Develop, implement, monitor and measure key metrics and performance indicators across the IT Security landscape.
• Provide direction and leadership to security-related investigations and incident response activities.
• Coordinates and develops security staff with a focus on security solution development, advanced security technologies and technical proficiency in core areas (Windows/Unix, networking, forensics, etc).
• Leads efforts to rationalize, review and secure network perimeter and 3rd party connections. Responsible for the implementation and maintenance of technical and procedural controls to protect information flows across networks.
• Consults with Internal Audit and Financial Reporting departments to ensure that adequate controls are in place and tested to ensure compliance with regulatory bodies.
• Consults in projects to assess risk and to ensure that information security requirements are included in the project business case.
Requirements
• BS or Masters degree from an accredited institution.
• 5+ years IT security work experience
• Excellent knowledge of MS Windows, Linux/Unix or SAP technologies
• Knowledge and understanding of government and/or regulatory/compliance
• Extensive knowledge of the Internet and networking concepts underlying the above systems (DNS, DHCP, TCP/UDP, SMTP, LDAP, etc).
• Working knowledge and experience in performing confidential security investigations and digital forensic analysis.
• Excellent knowledge of Enterprise-class firewall and filtering technologies.
• Knowledge of secure perimeter development and management including security zones, well-formed policies, monitoring and attack-surface reduction techniques.
• Excellent IT project skills (business case development, requirement development, etc).
• Working knowledge of dynamic languages (one or more of the following) such as JavaScript, perl, python, php, tcl, VBScript, ruby, shell or powershell as well as managed code execution concepts/environments (e.g. .Net Framework, JRE)