Job Summary
We are seeking a Security Analyst IV with deep expertise in mainframe security to support vulnerability management projects, security assessments, and z/OS hardening initiatives. The role involves tactical project execution, detailed data analysis, asset modeling, security documentation, and direct client support. The ideal candidate will have strong knowledge of mainframe security systems, including ACF2, TSS, and RACF, along with experience using zSecure Audit and applying security standards to vulnerability remediation.
Key Responsibilities
• Execute day-to-day project activities, including detailed analysis of various data points.
• Provide mainframe security expertise to guide projects, support asset modeling, and maintain project documentation.
• Interface directly with client staff to provide training and answer day-to-day questions about internally developed vulnerability management tools and related utilities.
• Serve as a subject matter expert on mainframe security systems, including ACF2, TSS, and RACF, for vulnerability management projects.
• Define and recommend security standards for z/OS hardening, security controls, and vulnerability remediation.
• Coordinate and communicate between mainframe engineering teams and information security teams.
• Support vulnerability management initiatives by applying mainframe security expertise and established security standards.
• Maintain clear technical documentation and communicate security findings and recommendations to relevant stakeholders.
Required Qualifications
• 7-10 years of experience with zSecure Audit.
• Strong expertise in mainframe security systems, including ACF2, TSS, and RACF.
• Experience applying z/OS RACF Security Technical Implementation Guide (STIG) requirements in hardening efforts.
• Understanding of z/OS security hardening, security controls, and vulnerability remediation.
• Strong analytical, communication, and documentation skills.
• Ability to provide client-facing training and technical support.
Preferred Qualifications
• Background in z/OS security consulting or penetration testing.
