Information Security Architect

Abacus Solutions Group, LLC; San Antonio (TX); In loco; USD 80.000 - 110.000; Tempo pieno

Descrizione del lavoro

Abacus Solutions Group, LLC seeks a security professional to protect information systems across on-prem and cloud environments. You will monitor IDS, assess firewall changes, and implement security infrastructure to guard assets.

The ideal candidate holds a BA/BS and one of CISA, CISM, CISSP, or CCSP, with experience in audits, vulnerability assessments, and documentation of security policies.

Competenze

• BA/BS or equivalent from an accredited university is required.
• Certifications such as CISA, CISM, CISSP or CCSP are preferred.

Mansioni

• Monitors IDS to identify security issues for remediation.
• Evaluates firewall change requests and assesses risk.
• Writes and maintains security policies and procedures.
• Performs system audits and vulnerability assessments.
• Provides guidance on information assurance best practices.

Conoscenze

IDS monitoring

Firewall management

Forensic analysis

Security policy development

Security auditing

Formazione

BA/BS in Computer Science or related field

Strumenti

IDS tools

Firewall systems

Vulnerability assessment tools

Descrizione del lavoro

Job Profile Summary

Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. The ideal candidate will be knowledgeable in both on premise and cloud security architecture and have experience with the implementation and configuration of security tools. They will be able to provide insights and recommendations surrounding web applications and cloud-based solutions. They should be able to provide documentation to management as needed.

Duties and Responsibilities:

• Monitors and analyzes Intrusion Detection Systems (IDS) to identify security issues for remediation
• Recognizes potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information
• Evaluates firewall change requests and assesses organizational risk
• Communicates alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Design, integrate, and implement information systems security infrastructure
• Analyzes the information systems to ensure that appropriate security functions have been included in the systems design and architecture
• Recommend and implement changes to enhance systems security and prevent unauthorized access
• Research security trends new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
• Provide guidance and direction on best practices for the protection of information
• Safeguards the network against unauthorized infiltration, modification, destruction or disclosure
• Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools
• Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, and telecommunications
• Develop policies and procedures to prevent unauthorized access
• Provides recommendations to clients on information assurance engineering standards, implementation dependencies, and changing information assurance related technologies
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance
• Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information
• Performs preliminary forensic evaluations of internal systems
• Provides guidance in the creation and maintenance of Standard Operating Procedures and other similar documentation

Education:BA/BS or equivalent from an accredited university is required.

Must one more of the following certifications:

• ISACA - Certified Information Systems Auditor (CISA)
• ISACA - Certified Information Security Manager (CISM)
• (ISC)2 - Certified Information Systems Security Professional (CISSP)

• (ISC)2 - Certified Cloud Security Professional (CCSP)