#VDartInc #Hiring :: Network & Information Security Lead - Pleasanton, CA -- Permanent/ FTE Position

I am hiring for one of our direct client /Implementing partner. Please find below the Job Description, if interested please revert with the updated copy of your resume in a word format and a good time to discuss.

Position: Network & Information Security Lead

Location: Pleasanton, CA

Permanent Position

1.       Should have minimum 10+ year experience in NW security & Information security domain

2.       Hands on experience in implementation, trouble shooting and upgrade of FWs, IPS, Load Balancers, VA (Vulnerability Assessment) etc.

3.       Excellent communication skills – should be able to interface with CISO/CTO level

4.       Should have relevant Security certifications

Main Responsibilities:

·         Technical expert who can design and deliver network security solutions

·         Manage other IT security deliverables for the client which includes network and information security.

·         Identify, assess and plan the level and nature of expertise and resources required to deliver cost effective maintenance and support to the security

·         Providing support for Incident and Problem management and to provide 3rd level support in response to Major Incidents.

·         Managing relationships with key customer managers

Desired Skills and Experience

Core competencies, knowledge and experience:

·         Bachelor’s Degree (Information Systems, Computer Science,).

·         7+ years of relevant experience

·         In-depth understanding of major security technologies,

·         Network security – Firewalls, IPS, IDS, Antivirus, AAA, Web gateway

·         Security Information Management - SIEM

·         Content Management &Proxy solution

·         Vulnerability Assessment process and systems (Qualys Guard)

·         Encryption Standards

·         Firewall Configuration

·         Intrusion Prevention Systems

·         Host Intrusion Detection Systems

·         Proxy Configuration / Reporting

·         Data Loss Prevention System Functionality

·         VPN Administration

·         Digital Certificates / PKI

·         Extensive hands-on technical skills to cover installation, configuration, administration and advanced troubleshooting

·         Experience of working within a Service environment and technical teams of IT experts

·         Experience of working on ITIL ticketing systems (SNOW, Remedy), understand ITIL framework

·         Experience in representation in Change Advisory Board (CAB) meetings

·         Experience of being able to highlight issues and solutions

·         Experience of managing outsourced or offshore supplier support groups

·         Strong verbal/written communication skills

Technical / professional qualifications:

·         Excellent knowledge and experience designing network security architectures

·         Excellent knowledge of capacity planning for network security solutions

·         Potential to be on call and work weekends

·         Advanced understanding of network routing issues

·         Expert level knowledge at implementing, configuring, and troubleshooting firewalls in environments requiring complex configurations

·         Expert level knowledge at implementing, configuring, and troubleshooting complex VPN configurations

·         Advanced understanding and knowledge at implementing, configuring, and troubleshooting complex Load Balancer configurations

·         Advanced knowledge of Intrusion Detection concepts and applications

·         Ability to recognize, mitigate, and troubleshoot DDOS attacks

·         Knowledge of security policies and practices, including SOX

·         Advanced experience in using common network industry accepted tools for troubleshooting and managing various devices

·         Performance Management & fine tuning  

·         Experience in System Fault Tolerance Design, Business continuity and Disaster recovery planning

Business Skills

·         Strong interpersonal skills and ability to translate IT technical language  into everyday terms which users can understand, specifically non-technical senior management

·         Ability to interact with customers so as to ensure that the service is flexible, efficient and responsive

·         To work through issues analytically to a successful conclusion

·         Demonstrable results in a business customer facing role, with a track record of delivering services to defined service levels.

·         Experience in the management of multi-discipline teams in distributed locations.

·         Experience of working in an Operational environment alongside other technical and operational teams, ensuring that all parties collaborate effectively to deliver services.

·         Use of ITIL service management framework to deliver best practice capabilities for TNT.

·         Proven ability to deliver improvements that deliver greater value to the customer and business through more efficient delivery and/or lower costs.

      #Information Security, #InfoSec, #Vulnerability, #Network Security, #Load Balancer, #Firewall, #SIEM, #PKI, #Pleasanton, #Job, #Jobs, #SecurityJobs, #California

      Abraham | 678-720-3170 | abraham@vdartinc.com | Tweet Me @abraham_vdart

Read More

#VDartInc #Hiring :: Application Security Consultant - Pittsfield, MA

I am hiring for one of our direct client /Implementing partner. Please find below the Job Description, if interested please revert with the updated copy of your resume in a word format and a good time to discuss.

Title                 : Application Security Consultant

Location           : Pittsfield, MA

Duration           : 6+ Months

Rate                 : $Negotiable

This service will provide following functions for Application security and information protection globally:

·         Conduct application security assessment for all types of applications, internet, extranet, Intranet, mobile, etc.

·         Thorough review of various application architectures and attack vectors on application tier and database tier components.

·         Conduct application vulnerability assessments, penetration testing with usage of applications security tools and source code analyzers.

·         Manage and administer IBM AppScan Enterprise tool for Application assessment and Qualys Dell SecureWorks tool for Database vulnerability management.

·         Web Application Dynamic Scanning using IBM AppScan Dynamic Scanner.

·         Web Application Static Scanning using IBM AppScan Source for Analysis.

·         Manage IBM AppScan GSC component for Web Services vulnerability assessment.

·         Manage IBM AppScan Web Explorer tool for manual exploration of web applications.

·         Manage Virtual Forge Code Profiler tool for scanning SAP ABAP code.

·         Provide secure development standards and practices for the following application languages/platforms: Microsoft .NET, J2EE, SAP ABAP, IOS, Android and Oracle DB/MS SQL Server.

·         Review Web-based solutions developed in HTML5, DHTML, CSS, and JavaScript.

·         Providing fix recommendations for vulnerabilities to software development teams.

·         Adopt one of leading methodologies used in industry like OWASP, CVSS, CWE, OSSTMM and/or SANS-25.

·         Design and develop security controls for applications.

·         Use of Secure Software Development Life Cycle (SSDLC) and IT Processes.

·         Vulnerability Assessment and Penetration Testing.

·         Applications Security Assurance including web and mobile apps.

·         Identify & Remediate Software Vulnerabilities Earlier in the Development Lifecycle.

·         Building Secure Code Policies, Guidelines, & Standards

·         Empower Developers and Architects to Identify & Eliminate Software Vulnerabilities.

·         Detailed and In-depth Application Security Analysis.

·         Threat modeling and Application Design review

·         Reporting Vulnerability assessment and fix recommendations.

·         Securing applications before going into production.

#Information Security, #Application Security, #IBM AppScan, #Web Application Security, #vulnerability assessment, #Web Services, #HTML5, #CSS, #Vulnerability, #Pittsfield, #Job, #Jobs

Abraham | 678-720-3170 | abraham@vdartinc.com | Tweet Me @abraham_vdart | Open Jobs with VDart

Read More

#VDartInc #Hiring :: SOC/ Security Operations Center Analyst - Atlanta, GA

I am hiring for one of our direct client /Implementing partner. Please find below the Job Description, if interested please revert with the updated copy of your resume in a word format and a good time to discuss this opportunity further. If you are not looking for a change at this time – appreciate if  you could forward this opportunity to your friends or colleagues; so that we can help someone who may be in search of a job or looking for a change.

Title                 : SOC/ Security Operations Center Analyst

Location           : Atlanta, GA

Duration           : 6 Months 

·         Assign staff and monitor their conduct of platform or operating system vulnerability scans that assess exposure of system to attacks or hacking.

·         Monitor Security Operations pager and respond to issues of potential viral activity, spam, phishing, etc.

·         Develop and administer controls and review their application to ensure that system’s controls, policies, and procedures are operating effectively relative to the predicted effectiveness of the controls.

·         Manage or lead investigation of events or incidents of apparent security breaches and report to appropriate authorities using corporate procedures.

·         Confer and collaborate with internal and external auditors to ensure that appropriate controls are installed, operating properly, and being monitored and reported.

·         May plan and/or conduct tests of the core infrastructure and the contingency environment for critical business applications to ensure business continuity in the event of a computer security incident.

·         Review aggregated metrics of operation of security controls, as well as apparent attacks, breaches, and other pertinent data before referring to management.

·         Plan and manage projects designed to test defenses against hacking, denial of service, spam, break-ins, or similar attacks. Provide guidance to infrastructure or application staff participating in exercise.

·         Examine and/or test new methodologies or tools that could be adopted to enhance security of platforms, infrastructure, or access to data.

·         Contribute to growth of less experienced staff through assignment, mentoring, and technical training.

Specialized Knowledge & Skills

·         Experience with HP Arcsight & GRC

·         Experience in Security Operations within a 24×7 environment.

·         Strong knowledge of cyber incident response, data security technologies, threat intelligence processes.

·         Strong knowledge of SIEM technologies

·         Strong knowledge of information security principles and industry best practices.

·         Experience with computer forensics

·         CISSP/CISM is a plus

 #SOC, #Security Operations Center, #Information Security, #HP Archsight, #Archsight, #GRC, SIEM, #Cyber Incident

Thanks & Regards,

Abraham | +1 678-720-3170 | abraham@vdartinc.com | Open Jobs with VDart

Read More

#VDartInc #Hiring :: Network Security Engineer - Atlanta, GA

I am hiring for one of our direct client /Implementing partner. Please find below the Job Description, if interested please revert with the updated copy of your resume in a word format and a good time to discuss this opportunity further. If you are not looking for a change at this time – appreciate if  you could forward this opportunity to your friends or colleagues; so that we can help someone who may be in search of a job or looking for a change.

Title                 : Network Security Engineer

Location           : Atlanta, GA

Duration           : 6 Months 

This position provides comprehensive security engineering expertise to identify risk across all business lines and propose network-based controls and mitigation strategies.  Responsible for the testing and planning of security hardware and software components, and partnering with operations organizations for deployment. Responsible for maintaining security appliances and applications in lower environments. Acts as an escalation point from lower tier support groups. Participates in the change management process to insure the ongoing security of the production environment.

The sustaining security engineer should have a strong, multidisciplinary telecommunications background along with experience in more traditional IT networks.

RESPONSIBILITIES

·         Design work to insure the security of newly deployed applications and services.

·         Manage lab environments to maintain a secure test bed and evaluate security controls during application design/test phases.

·         Develop Standard MOPs, Work Packages, approved SW versions, assembling change requests for tested configurations and evaluating the feasibility and appropriateness other change requests as submitted.

·         Install, Configure, Test & Activate in First Office Application

·         Provide support to security operations organizations in the areas of ongoing lifecycle maintenance and new service deployments.

·         Create documentation supporting new deployments and existing legacy infrastructure

QUALIFICATIONS

·         5+ years of experience in information security

·         Strong understanding of the OSI model

·         Understanding of network security controls, including firewalls, ACLs, IPS/IDS, and application gateways.

·         Experience with AAA systems and VPN configurations.

·         Knowledge of proper security design philosophy

·         Extensive experience with firewalls, NG-firewalls, network and switching equipment

·         Strong foundation in dynamic routing protocols

                                               

Preferred

·         Certification preferred  JNCIP-SEC, CISSP

·         Experience with implementing solutions compliant with the PCI-DSS

·         Experience with virtualized environments

·         Experience with load balancer technologies

·         Experience with Juniper, Cisco and Palo Alto firewall technologies

#Network Security Engineer, #Network Security, #Information Security, #Juniper, #JNCIP, #CISSP, #Palo Alto, #Atlanta, #Georgia, #GA

Thanks & Regards,

Abraham | 678-720-3170 | abraham@vdartinc.com | Tweet Me @abraham_vdart 

Read More