Senior Security Engineer

Global Technical Talent; Framingham (MA); Remote; Full time

Job summary

A leading company is seeking a Senior Security Engineer to enhance security measures in their ACF2 environment. The ideal candidate will have extensive experience in cybersecurity and risk management, ensuring the integrity of IT assets. This role involves designing security controls, educating junior staff, and leading complex security projects. The position is fully remote, with a preference for candidates in EST and CST time zones.

Benefits

Medical Insurance

Vision Insurance

Dental Insurance

401k Retirement Fund

Qualifications

• Minimum 10 years' experience as a Security Engineer in ACF2 environment.
• Hands-on experience with z/OS System Security.

Responsibilities

• Assess risk and identify potential gaps in access and security.
• Design and implement security controls for ACF2.

Skills

Risk Assessment

Cybersecurity

Leadership

Tools

ACF2

z/OS

SIEM

Job description

Job Title:Senior Security Engineer
Contract Duration: 6+ Months
Pay range: $79.56 - 91.27/hr
Location:Framingham, MA
Work Type: 100% Remote; preference is EST and CST

Job Description:

• Our client is looking for an ACF2 Senior Security Engineer. As a member of the Security team, you will use your expertise and experience to assess risk, identify potential gaps in access and security, design and implement security controls for ACF2 to keep data and access in the mainframe environment secure.
• This position will assist in implementing security controls to ensure the confidentiality, integrity, and availability of the Client's IT assets. Responsible for the administration of ACF2 mainframe services and lifecycle governance processes around ACF2 user authentication and resource access.

Specific Responsibilities:

• Supports the publication and communication of security standards, frameworks, principles, and roadmaps to be used throughout the IT organization to guide technology decisions and leverage opportunities through efficient design.
• Assists Security Engineers and Managers in matching security technology assets to specific business services and application development projects to ensure consistent use of models and controls throughout the enterprise.
• Identifies risks to the environment, proposes options for remediation.
• Educates and guides engineers in the vision and use cases of specific solutions within the Security Architecture portfolio.
• Senior Security Engineer provides guidance on security solutions and designs.
• Participate in working teams to provide support for the definition of an enterprise strategy, including the definition of standards, guidelines, and best practices for application-to-application and business-to-business integrations.
• Maintain awareness of industry trends and best- practices tied to enterprise technologies to introduce innovation and ensurethe cost-effectiveness of the Client's standards and strategies.
• Generates and supports the definition and selection of enterprise security standards, including tools, technology, applications, and processes. Drives the scoping and implementation of solutions as required.
• Provides and documents traceability from security policies down to underlying technology and its use.

Minimum Qualifications (Requirements):

• A minimum of 10 years' experience as a Security Engineer supporting an ACF2 Security environment
• Hands-on experience with z/OS System Security.
• Experience establishing SSL and Digital Certificate, risk assessment, business continuity/DR, etc.
• Software/Application security (i.e., z/OS, CICS, DB2, IMS, MQSeries, JES2), z/OS System and Sub-System knowledge (i.e., JCL, SDSF, JES2, FTP).
• Passionate cybersecurity professional, eager to share knowledge and educate more junior staff.
• Thought Leader on Security Technologies.
• Able to lead complex Security Projects and report out to Leadership.
• High level of perseverance, energy, and confidence to act as ACF2 security Subject Matter Expert.

Additional Qualifications (Preferences):

• Familiarity with ACF2-RACF role-based access governance
• Client currently uses ACF2-UID (user identity), but isslowly moving to role-based
• Integrating the IBM mainframe with AZURE.
• Experience with SIEM tools and their integration to mainframes, such as Splunk, LogRhythm, or QRadar.
• Experience with Privileged Access Governance tools and concepts, such as CyberArk and TAM-Z.

Benefits:

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

About The Company:
Off-Price Apparel and Home Retailer:
A Fortune 500 company and the leading off-price apparel and home fashion retailer in the U.S. and worldwide. With over 4,500 stores in nine countries and four e-commerce sites, our client offers various products at unbeatable prices. The company is committed to creating an inclusive workplace and being a responsible corporate citizen.

About GTT:
GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. As a Native American-owned, economically disadvantaged corporation, we highly value diverse and inclusive workplaces. Our clients are Fortune 500 banking, insurance, financial services, and technology companies, along with some of the nation's largest life sciences, biotech, utility, and retail companies across the US and Canada. We look forward to helping you land your next great career opportunity!

25-21490: #LI-GTT #LI-Remote