Medior Security Specialist (QR3396)

Functie : Medior Security Specialist (QR3396)
Start : 1-9-2015, 36 uur per week
Periode : 3 mnd+
Omgeving : Amsterdam

Omschrijving Medior Security Specialist (QR3396) :
The Ops Engineer works in a DevOps team which consists of Dev Engineers en Ops Engineers. The Ops engineer transports the application to a production environment and monitors the application on availability and correct functioning. Proactive and reactive actions are taken to assure continuity and compliance. This is a generic role description. Focus areas may differ per team and/or employee, depending on the specific activities performed within this role.

Key tasks Medior Security Specialist (QR3396) :
Service Design:
• Deliver mandatory Security Products (like Soll matrix)
• Contribute to SA (with Enterprise Architect).
• Contribute to Analysed Service Level Requirements (with Service Manager)
• Contribute to and/or write availability plan, capacity plan, Business Continuity Plan, Disaster Recovery Plan, Backup Restore Plan, Security Plan.
Application Lifecycle Management:
• Deliver input for or write Life Cycle Management Plan (application and platform).
Service Implementation & Small Enhancements:
• Execute acceptance tests (including performance tests) resulting in Accepted Software.
• Build, test and schedule monitoring scripts, batch scripts and Deployment scripts.
• Deploy software (resulting in Deployed Software), with the use of (automatic) deployment scripts.
• Manage consistent DTAP environments, an up-to-date CMDB and A-OSG.
• Deliver implementation advise. Contribute to Implemented & Accepted Service. Check if acceptance criteria and process is according to guidelines. Maintain Release Plan and Accepted Change.
• Contributing to Transition Plan
• Chair of CAB (Change Management related task)
Service Operation & Control
• Solve incidents and write user stories for structural improvement to prevent reoccurring incidents (analyzed problem).
• Monitor batch processes, availability and capacity
• Maintain system tables and application firewalls & security measures, which can result in analyzed security events.
• Audit and verify granted user access on the application (SOLL-IST comparisons) resulting in adjusted user access (RBAC roles) or updated SOLL matrix.
• Execute and test Business Continuity Plan, Disaster Recovery Plan, Backup Restore Plan, Security Plan.
• Contribute to (Operational) Service Improvement Proposals.
• Perform Risk analysis for reported security events, manage Security Products Renewals and advise service manager.
• Contribute to Escalated Incident / Security Event and Operational Service Improvement Proposals / Service Reporting (with Service Manager).
• Contribute to Risk Profile (with Business).
Service Request:
• Deal with service requests (fulfilled requests).

All based on Scrum/Lean way of working, which means a.o.:
• participate in planning & estimation process,
• participate in sprint demo's, Stand-ups, retrospectives and product backlog refinement

Certification Medior Security Specialist (QR3396) :
General :
• HBO (IT) or WO (IT)
• Ops Engineer education plan (within 24 months, 50% within 12 months)
• Certification on software package or SAAS solution (as far as required from Ops perspective)
• ITIL Foundation + ITIL Advanced modules where applicable for specific role

Focus Area Security Medior Security Specialist (QR3396) :
• HBO Specialization IT Security
• CISSP (Certified Information Systems Security Professional)
• IT Sourcing Minimum Standard (Policy House)

Level of experience:
• Relevant IT experience - 3 years ( as of level )
• Relevant domain experience - 2 years ( as of level 9)

Medior Security Specialist (QR3396)