---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Engineer
Location: Miami, Florida, United States
Type: Permanent F/T
Closing Date: 2007-03-17
The successful candidate will work with members of Information Security,
Infrastructure Technology and Business Systems teams to architect and manage
appropriate security measures for the protection of corporate information
assets. The Senior Security Engineer/Analyst is a consultant, an architect, a
developer, and is responsible for the complex and detailed technical work
necessary to establish and maintain information security systems such as
firewalls and intrusion prevention systems. In addition, the Senior Security
Engineer/Analyst redesigns and reengineers internal information handling
processes so that information is appropriately protected from a wide variety of
problems including unauthorized disclosure, unauthorized use, inappropriate
modification, premature deletion, and unavailability.
This position contributes to Telefonica North America’s success by
ensuring the protection of information and information resources. This position
provides day-to-day security consulting by conducting in-depth technical
security reviews, risk assessments, and documenting recommendations for risk
mitigation; providing guidance to system owners in the development and
technical review of information security plans; developing Telefonica North
America-wide (including Miami and Puerto Rico facilities) security policy and
guidelines; and providing technical guidance to information owners, other
company security officers, and colleagues.
Will conduct security audits, review information system audit review records
and perform security vulnerability assessments on facility systems. Will
evaluate tools and technologies that will improve network and system security.
Will coordinate and conduct security education programs for user community.
Will facilitate and oversee the accreditation of new systems, provide support
for the re-accreditation of existing systems and coordinate the proper
de-certification of classified systems and media. Will coordinate and
participate in the investigation and mitigation of information system
contaminations. Will be the point of contact for establishing connections to
Internal networks. Will contribute to the development of disaster recovery
plans to rebuild critical systems.
As a member of the operations team, you will be working closely with our
Systems and Network Engineers in a fast paced environment.
JOB REQUIREMENTS
---------------------------------------------------
ACADEMIC BACKGROUND AND EXPERIENCE:
Responsibilities:
• Help define overall network security strategies and procedures.
• Design and maintain Firewall and VPN infrastructure.
• Develop and implement network intrusion detection systems.
• Develop and implement network DoS mitigation strategies.
• Perform security reviews and audits to help Telefonica USA Engineering
with system security issues.
• Perform network traffic analysis to help Telefonica USA Network
Engineering with network security issues.
• Assisting other IT areas with developing controls to ensure compliance
with all relevant regulation and legislation that affects IT (Sarbanes-Oxley,
privacy laws, etc).
• Ensuring all requirements of Network Security are met for any third
party connectivity
• Maintain syslog server for FW and other security devices logs.
• Assist in any forensics work.
• Monitor the status of each VPN tunnel for operational status and
connectivity and report on any alerts
• Physical Resource Utilization data/ trend collection and tracking on
firewall, NIDS resources like CPU and Memory utilization
• Monitor the status of Firewalls and their interfaces
• Ensuring all FW change control procedures are met.
• Liaising with vendors for management and monitoring of FW/HIDS/NIDS
• Participate in the formalization of security problems, identification
of vulnerabilities and exploits
• Evaluate new and emerging products and technologies.
• Evangelize security within Telefonica North America.
• Monitor SANS, CERT, Bugtraq, Software/Hardware Vendors, for Security
alerts, do impact analysis, and submit the same to the InfoSec manager for
approval.
• Participate in on-call rotation.
Requirements:
• BS, MS in Computer Science or equivalent.
• 3+ years experience in a network security role at organizations with
large networks.
• Detailed knowledge of network based attacks and their mitigation.
• Expert knowledge of TCP/IP and other networking/application protocols
(e.g., TCP/IP, IPSEC, routing protocols, 802.1x, NTP, SNMP, HTTP(S), DNS, ARP,
static and dynamic routing, NAT, 802.1Q, port-channels, vlan-tagging, SSH, SQL,
NSRP/HSRP/VRRP or the like).
• General Unix systems administration
• Windows systems administration knowledge for troubleshooting '
• Generic server load balancer (SLB) knowledge (F5, CS, etc)
• Experience working with centralized authentication / authorization
services such as Radius and RSA SecurID
• Strong scripting skills a plus (e.g., PERL, shell scripting, Python).
• Excellent communication and teamwork skills.
• The ability to effectively communicate complex and detailed concepts to
others.
• Self directed mentality with excellent leadership and facilitation
skills.
• Creative, problem-solving approach to projects
• Comfortable in a fast-paced environment
• A CISSP is strongly preferred. Additional preferred certifications
include a CCNA, Cisco Security Specialist and/or applicable SANS certifications
• Creative, problem-solving approach to projects
• Fluent in English and Spanish (spoken and written)
CONTACT
---------------------------------------------------
For Technical Information:
Arsene Laurent- Information Security Manager Office: (786) 845-9664
Physical Address:
Doral Area
For HR Information;
Lizzette Velez
787-273-5552
Telefonica
Lizzette Velez
Training & Development Mgr.
lizzette.velez@empresas.telefonica.pr
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
