Job Summary:
We are seeking an experienced Security Analyst IV with strong Mainframe Security expertise to provide tactical project execution, detailed security analytics, asset modeling, vulnerability management, and project documentation. The role will serve as a subject matter expert across mainframe security systems including RACF, ACF2, and TSS, while supporting z/OS hardening, security controls, vulnerability remediation, and collaboration between mainframe engineering and information security teams.
Key Responsibilities
• Provide day-to-day tactical execution of security projects, including detailed analysis of various security and vulnerability data points.
• Serve as a Mainframe Security subject matter expert supporting vulnerability management projects and related initiatives.
• Guide project activities, asset modeling, and project documentation as required.
• Serve as a direct interface with client staff for training and day-to-day questions related to vulnerability management and utility tools.
• Provide expertise across mainframe security systems including ACF2, TSS, and RACF.
• Determine and support security standards related to z/OS hardening, security controls, and vulnerability remediation.
• Leverage z/OS RACF STIG requirements in mainframe security hardening efforts.
• Communicate and coordinate between mainframe engineering teams and information security teams.
• Support vulnerability identification, analysis, remediation, and tracking activities.
• Develop and maintain clear technical documentation related to security projects, hardening activities, and vulnerability remediation.
Required Qualifications
• 7-10 years of hands-on zSecure Audit experience.
• Strong Mainframe Security expertise with RACF.
• Experience with ACF2 and TSS mainframe security systems.
• Experience with z/OS security controls and hardening.
• Experience leveraging z/OS RACF STIG requirements in hardening efforts.
• Experience supporting vulnerability management projects and security remediation activities.
• Strong analytical skills with the ability to evaluate detailed security and vulnerability data.
• Strong communication and documentation skills.
Preferred Qualifications
• Background in z/OS security consulting.
• Experience with mainframe security penetration testing.