Law

•Strong understanding of pragmatic implementation of information security controls that focus on enabling, while securing, the business (e.g. holistic defense-in-depth strategies; protocols used to interconnect networks, publish application resources, etc.; security risk management methodologies; PCI, HIPAA, and SOX regulatory compliance requirements; security incident response; security configuration hardening and compliance management; etc.).

•Expertise with Application, System, and Network security vulnerability management

•Identifying vulnerabilities (scheduling and executing vulnerability scans using Qualys).

•Analyzing vulnerability scan reports for finding validation (e.g. false positives).

•Analyzing vulnerability scan reports for environment-specific risk analysis/ratings.

•Defining environment-appropriate remediation plans.

•Coordinating the execution of defined remediation plans with applicable departments.

•Reporting up-to-date status information on findings and remediation status.

•Firewall platform administration (e.g. Cisco, Palo Alto).

•Remote Access platform administration (e.g. Cisco [ASA/Altegia], Juniper SSL VPN).

•Secure File Transfer platform administration (e.g. GlobalScape).

•Security Hardening process administration across platforms (e.g. Windows, Linux, UNIX, network devices, etc.).

•Experience is required in:

oIBM Tivoli Endpoint Manager (TEM) administration – formerly known as BigFix.

oIPS platform administration (e.g. Cisco).

oSecurity Information and Event Management administration (e.g. NetIQ, Nitro, QRadar, Splunk,).

•Courion Access Assurance Suite administration.

•File Integrity Monitoring administration (e.g. NetIQ).

•Data Loss Prevention administration (e.g. Symantec)

•Written Policy Management administration (e.g. NetIQ).