Operational Security Officer (IBM Mainframe Z Series)

Role Description:

As an Operational Security Officer for IBM Mainframe Z Series, your primary role is to maintain and improve the overall security posture of the organization's IT infrastructure that is based on IBM Mainframe Z Series technology.

You will work closely with the security team and other stakeholders to identify potential security risks and develop effective remediation strategies specific to IBM Mainframe Z Series architecture.

Your role's key responsibilities are:

1. Conduct regular security assessments of our IBM Mainframe Z Series infrastructure and identify potential vulnerabilities that need to be addressed.
2. Implement and maintain IBM Mainframe Z Series security policies, procedures, and standards in compliance with applicable legal and regulatory requirements.
3. Perform periodic detailed assessments of the operating system and infrastructure components' security configuration to identify security vulnerabilities and provide remediation alternatives.
4. Coordinate security incident response and investigation with the relevant parties in IBM Mainframe Z Series area.
5. Provide IBM Mainframe Z Series-specific security guidance and support to other teams in the organization.
6. Implement IBM Mainframe Z Series-specific security controls for new systems and projects.
7. Contribute to IBM Mainframe Z Series-specific security awareness training for employees and contractors.
8. Identify potential security threats for IBM Mainframe Z Series systems and proactively recommend and take necessary actions to mitigate those risks.
9. Stay up-to-date on the latest IBM Mainframe Z Series-specific security threats and trends and recommend new technical, administrative, or process changes to improve security posture.

Requirements:

1. Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent practical experience.
2. Minimum of 8 years of experience in IT security operations, specifically related to IBM Mainframe Z Series.
3. Experience with IBM Mainframe-specific security tools and technologies, such as RACF, zSecure, Syslog, CARLA, ICSF, etc.
4. Knowledge of IBM Mainframe Z Series-specific security standards and frameworks such as z/OS Security, RACF, zSecure, etc.
5. Experience with building out RACF reports in zSecure to support database authenticity.
6. Experience with onboarding and decommissioning applications into RACF structures.
7. Extensive knowledge of SSO, Active Directory (AD), LDAP, public key infrastructure (PKI), privileged accounts, integration of application program interface (API), implementation and support of digital certificates, Kerberos, SSL, SSH.
8. USS experience is highly desired.
9. Understanding of IBM Mainframe Z Series-specific network protocols, operating systems, and virtualization technologies.
10. Excellent analytical and problem-solving skills for IBM Mainframe Z Series.
11. Strong written and verbal communication skills in providing advice, recommendations, or technical support in IBM Mainframe Z Series security.
12. Relevant security certifications related to IBM Mainframe Z Series such as IBM Certified Administrator - Security z/OS, IBM Certified Specialist - z Security Technical Sales, etc., would be a plus.