Network Segmentation Testing Specialist

Responsibilities

• Conduct Segmentation Testing:
  Perform detailed segmentation testing of network environments to ensure strict compliance with PCI DSS requirements.
• Document Findings:
  Prepare comprehensive reports documenting testing results, vulnerabilities, and recommended remediation steps.
• Collaborate with IT Teams:
  Work closely with network and security teams to address segmentation issues and implement necessary changes.
• Maintain Compliance:
  Ensure ongoing adherence to PCI DSS standards and regulations through continuous monitoring and testing.
• Develop Testing Procedures:
  Create and refine segmentation testing procedures and methodologies to improve effectiveness and efficiency.
• Stay Informed:
  Keep up to date with the latest developments in PCI DSS standards, security technologies, and best practices.
• Proficient with Linux command line scripting.
• Understand and investigate network topology and micro‑segmentation techniques in various asset categories (containers, cloud environments, etc.).

• Bachelor's degree, or equivalent work experience.
• Typically more than eight years of applicable experience.
• Strong Network Fundamentals including understanding of VLANs, subnets, IP addressing and routing.
• Knowledge of port configurations, and inter‑VLAN routing.
• Familiarity with firewall zones, ACLs, and NAT rules to enforce inter‑zone policies.
• Strong understanding of PCI DSS Segmentation requirements to isolate the cardholder data environment.
• Proven ability to perform host‑to‑host testing, including use of subnet wide scanning.
• Ability to create traffic permission matrices.
• Experience with network infrastructure and tools (Wireshark, Palo Alto, Cisco, etc.).
• Strong analytical, process facilitation and project management skill.
• Effective presentation, interpersonal, written and verbal communication skills.
• Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.