Mainframe Security Expert

Eliassen Group; Pittsburgh (Allegheny County); Hybrid; Confidential; Full time

Job summary

Eliassen Group is seeking a Mainframe Security expert for a contract-to-hire role in Pittsburgh, hybrid (4 days onsite). The candidate will serve as SME across ACF2, Top Secret (TSS), and RACF within vulnerability management initiatives, including standards setting for z/OS hardening, controls, and remediation, while coordinating between mainframe engineering and information security teams.

The position requires 7–10 years with zSecure Audit, 10+ years with z/OS ACF2/TSS, and proficiency in

Qualifications

• zSecure Audit experience required, 7 to 10 years.
• Expertise in Broadcom ACF2 and/or Top Secret (TSS); 10+ years with z/OS ACF2 or TSS.
• Demonstrated use of z/OS ACF2/TSS/RACF STIG in hardening.
• Proficiency with Mainframe REXX, IBM Syncsort, and ICETOOL.
• Experience with zSecure programming using CARLa.
• Background in z/OS security consulting or penetration testing preferred.
• Exposure to vulnerability management.
• Good communication and documentation skills; exposure to JIRA, Confluence, and SharePoint.

Responsibilities

• Provide day-to-day tactical project execution and perform detailed analytics across multiple data points.
• Act as SME for mainframe security systems including ACF2, TSS, and RACF within vulnerability management projects.
• Leverage z/OS ACF2/TSS/RACF STIG for hardening efforts.
• Interface directly with client staff to train and address daily questions on a home-grown vulnerability tool and related utilities.
• Determine and document security standards for z/OS hardening, security controls, and vulnerability remediation.
• Facilitate communication between mainframe engineering and information security teams.
• Create and maintain project documentation as required.

Skills

z/OS security

Mainframe security SME

Vulnerability management

Documentation skills

Communication skills

Education

BS degree

15+ years of mainframe security experience

Tools

z/OS ACF2

Top Secret (TSS)

RACF

zSecure

CARLa

REXX

IBM Syncsort

ICETOOL

JIRA

Confluence

SharePoint

Job description

Description:

Hybrid 4 days onsite in Pittsburgh, PA

Our client seeks a Mainframe Security expert to execute day-to-day project tasks, perform detailed analytics, guide asset modeling, and produce project documentation. The role will serve as a subject matter expert across ACF2, Top Secret (TSS), and RACF within vulnerability management initiatives, including standards setting for z/OS hardening, controls, and remediation, while communicating between mainframe engineering and information security teams.

This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $61.00 to $71.00/hr. w2

Responsibilities:

• Provide day-to-day tactical project execution and perform detailed analytics across multiple data points.
• Act as SME for mainframe security systems including ACF2, TSS, and RACF within vulnerability management projects.
• Leverage z/OS ACF2/TSS/RACF STIG for hardening efforts.
• Interface directly with client staff to train and address daily questions on a home-grown vulnerability tool and related utilities.
• Determine and document security standards for z/OS hardening, security controls, and vulnerability remediation.
• Facilitate communication between mainframe engineering and information security teams.
• Create and maintain project documentation as required.

Experience Requirements:

• zSecure Audit experience required, 7 to 10 years.
• Expertise in Broadcom ACF2 and/or Top Secret (TSS); 10+ years with z/OS ACF2 or TSS.
• Demonstrated use of z/OS ACF2/TSS/RACF STIG in hardening.
• Proficiency with Mainframe REXX, IBM Syncsort, and ICETOOL.
• Experience with zSecure programming using CARLa.
• Background in z/OS security consulting or penetration testing preferred.
• Exposure to vulnerability management.
• Good communication and documentation skills; exposure to JIRA, Confluence, and SharePoint.

Education Requirements:

• BS degree and/or 15+ years of mainframe security experience.