Security Engineer

REFERENCE NR.:
4097CD

INDUSTRY:
Bank

LOCATION:
Zürich und Region

START:
ASAP

DURATION:
6 months

PROJECT DESCRIPTION:
There are several Firewalls controlling access to protected zones. There are additional Firewalls providing ancillary services. These Firewalls have a large number of rules some of them obsolete and partially overlapping. This makes it hard to understand which access is allowed and which access is blocked. As a consequence it is difficult to ensure that data is properly protected and that only those connections are open that should be open. The bank has a remediation project funded which removes this risk.

TASKS THAT NEEDS TO BE PERFORMED BY THE CONTRACTOR:
- Analyze rules on the Firewall based on statistics and other information
- Work with the application teams to understand the impact of rule changes
- Propose changes or drops of rules
- Implement the rule changes and track outcome together with the onsite project team
- Make suggestions on how to further improve the Firewall settings

REQUIRED SKILLS/EXPERIENCE:
. Experienced security engineer with Firewall configuration and remediation background and a minimum of 5 years background in this space
. The project deals with a large Firewall rule remediation for the Swiss restricted zone of the bank and requires a deep know of Firewall concepts.
. It also comprises close collaboration with the applications in scope that the rules apply to. We thus require a person with good communication skills who can lead the application teams to come to a conclusion on the rules that can be dropped or transformed
. Preferably the person has worked with Firewall management tools such as Tufin
. Preferably the person has worked in the financial industry before

LANGUAGES:
. English is a must to have. German is nice to have.