Security Lead

Qualifications

• 8 years working in an Information Technology environment, including at least two years working with Information Security as a significant focus of activity.
• Requires broad and in-depth knowledge of industry innovations and state-of-the-art technology in both computing and networking arenas.
• IT Security certifications held or in progress are an asset. High performance computing systems management and networking is highly desirable.
• Expert understanding of client and server application deployment and support. Strong understanding of client and server activity tracking.
• Strong understanding of IT Architecture concepts and security methodologies. Experience auditing systems for compliance (PCIDSS, PA-DSS, etc.).
• Experience drafting information security standards and guidelines, assessing risk management and determining controls.
• Experience in administering enterprise-level Unix-based server applications. Strong scripting skills required, including Shell and interpreted languages.
• Experience with application / scripting tools (bash, Python).
• Experience configuring databases and database-backed applications (SQL Server, MySQL). Extensive experience using network and security analysis tools.
• Extensive experience with intrusion detection and prevention – host and network, active and passive. Experience in selecting, configuring and deploying service mis‑use detection and prevention technologies (Anti‑Spam, Anti‑Virus, Anti‑DDOS, etc.).
• Experience running penetration testing and vulnerability scanning (Metasploit, Nessus, etc.).
• Experience with deploying, configuring and securing virtualized environments, and services running in it.

• Expert level understanding of the Linux operating systems at both server and client level. Comprehensive knowledge of TCP/IP networking and client‑server architecture and protocols.
• Strong understanding of network configuration, hardware and next‑gen firewall/IPS technologies (Cisco ASA, Juniper, Fortinet, Palo Alto)
• Expert level understanding of the following access control technologies – LDAP and Kerberos.
• Expert knowledge of Virtual Private Networks (VPNs). Expert knowledge of encryption technologies at network, file and file‑system levels.
• Strong understanding of cryptographic certificates and the operation of certificate authorities. Excellent communication, instruction and presentation skills.
• Able to describe a variety of complex technical concepts or policies to users and senior leadership at all technical experience levels and to deliver security awareness and education content to faculty, staff and students.

Mid‑Senior level

Contract

Information Technology

Banking and Financial Services