Vacancy expired!
Full Time Permanent Role with CLIENT (Banking)
Benefits Medical, dental and vision insuranceRetirement program (401k and Pension)Generous PTO plan11 paid holidays per year Need to have- Proven experience with AWS cloud security best practices (e.g., IAM, WAF, KMS)
- Subject matter expertise in security domains, with knowledge pertaining to the majority of these topics: AppSec (OWASP Top10, SANS Top 25), Defense-in-depth, Risk assessment and management, Network topology and security, Network Infrastructure - securing network devices, Network protocols, Virtualization, Intrusion Detection, Intrusion Prevention, Logging, SIEM, Social Engineering, Security policy related to business continuity planning and contingency planning, Incident handling process, Opsec, Data classification, DRM, Pentesting, Vulnerability Analysis, Secure communications including encryption and cipher suites, Linux and Windows securityStrong analytical skills to analyze security requirements and relate them to appropriate security controlsExperience in performing web application and infrastructure penetration security test and threat modeling
- 10+ years of security experience including implementation of security controls for applications, cloud, and/or DevOps
- 5+ years of software engineering experience required
- Audit, compliance, and governance experience preferred
- Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans
- Knowledge of common information security management frameworks, such as ITIL and COBIT frameworks
- In-depth knowledge of risk assessment methods and technologies
- In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
- Skilled in performing risk, business impact, control, and vulnerability assessments