---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: New York, New York, United States
Type: Permanent F/T
Closing Date: 2007-02-17
Summary:
Works closely with to help in the coordination effort to remediate security
alerts and respond to information security related incidents that could
potentially impact the global network, systems and applications. The Security
Analyst will be responsible for doing security risk assessments when called
upon to assess the integrity of all new network connections, projects,
applications or processes. The candidate will work to implement the Global
Information Security Standards and the Global Information Security Policy. The
individual may be required to assist in testing systems, applications and
processes to ensure compliance with regulatory requirements, such as Sarbanes
Oxley (Sox) and Payment Card Industry Standard (PCI).
Responsibilities:
• Work with Intrusion Detection Vendor (IDS) to help manage the
relationship and ensure that all operating companies are receiving the services
agreed to including receiving the necessary alerts and to assist the operating
companies with a correct course of action to remediate vulnerabilities.
• Read and understand the responsibilities associated with the Global
Information Security Standards and Policy. This includes recommending future
enhancements to the standards and policy as well to the Technical Security
Baseline Standards used to strengthening the security on systems and
applications in our data centers.
• Work with the operating companies and the Director of Information
Security to maintain a Security Awareness effort in compliance with regulatory
requirements.
• Work to implement tokens for strong authentication for remote access.
• Work to implement laptop and server based encryption.
• Assist in reviewing Firewall proposed changes and provide approval when
necessary.
• Assist in virus remediation.
• Work with operating companies to evaluate new security technologies.
• Provides technical assistance with the initial set-up and secure
deployment of systems that support Information Security, customer and business
applications.
• Execute vulnerability tests on networks, systems and applications when
necessary.
• Conduct thorough security risk assessments in a complete comprehensive
report that includes technical and non-technical explanations of findings.
Reports must include at a minimum, risks, recommendations and asset recognition
as well as contingency issues.
JOB REQUIREMENTS
---------------------------------------------------
Technical Skills:
• WorkingIn depth knowledge of computer operating systems and applications
• In depth Working knowledge of networking topologies and protocols
• In depthWorking knowledge of security practices
• In depth Working knowledge of Information Security technology
architectures and database products
• Working knowledge of web development languages
• Min 3 years related experience
• Working knowledge of Sarbanes Oxley - General Computing Controls (GCC)
CONTACT
---------------------------------------------------
Brad Michaels
brad@howardmichaels.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
