Position Summary: Designs and monitors internal and external access controls, security safeguards and associated processes to protect the confidentiality, integrity and availability of PRAA information systems assets. Participates in evaluating new technologies and applications, assessing vulnerabilities and risks, detecting and responding to incidents, and recommending appropriate safeguards. Assists in the evaluation, selection, implementation and administration of security software across platforms.
Interact closely with product vendors and service providers, personnel from various IT departments - including Service Desk, Data Center, and Server Admin teams - as well as with business departments.
Professional Experience/Qualifications:- Bachelor's Degree in related field or equivalent work experience. Master's degree preferred.
- 7-9 years' of professional experience in security design, configuration, troubleshooting techniques, and the use of diagnostic software and tools are required or equivalent combination of education and experience
- Required Certifications: CISSP, SSCP
- Desirable certifications include: CCNA-Security, SANS/GIAC, PCNSE,
- Detailed knowledge in general security principles and practices.
- Proven ability to develop custom threat signatures in response to zero-day and emerging security threats.
- Detailed knowledge with security-related systems and applications, firewalls, packet analysis tools, intrusion detection/prevention, and web content filtering.
- Detailed knowledge of network infrastructure, including routers, switches, firewalls.
- Detailed digital Forensics skills and experience.
- Detailed knowledge on IDS / IPS solutions and integrating into existing network configurations.
- Strong analytical and problem-solving skills to enable effective security incident and problem resolution.
- Proven ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously.
- Ability to work well under minimal supervision.
- Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel.
- Strong written and verbal communication skills.
- Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.
Key Responsibilities:- Design, implement and maintain network security guidelines and a security infrastructure for the corporation.
- Develop and implement penetration testing and procedures.
- Develop, implement and maintain an alerting, archival and event log management system.
- Monitor compliance with information security policies and procedures. Monitor network, devices and servers for security violations
- Conduct data security forensic analysis
- Assist departmental technical staff in identifying and implementing appropriate security safeguards
- Coordinate and monitor security access for all applications
- Prepare monthly reports on security incidents and security status
- Architect and design appropriate security safeguards for Cloud solutions
- Implement and assist with security in a DevSecOps environment
- Develop and implement source code security analysis
- Serve as a security expert in applications development and database design efforts
- Research, design, and advocate new technologies, architectures, and security products that will support security requirements
- Contribute to maintenance and development of application and database security strategy and architecture
- Analyze business impact and exposure based on emerging security threats, vulnerabilities, and risks.
- Ensure adequate security solutions are in place to mitigate identified risks sufficiently to meet business objectives and regulatory requirements
