Dieses Jobangebot ist archiviert und steht nicht mehr zur Verfügung.
Vakante Jobangebote finden Sie unter Projekte.
Vakante Jobangebote finden Sie unter Projekte.
System Engineer - Security Audits (3953)
Eingestellt von iET SA
Gesuchte Skills: Engineer, Client, Engineering, Net
Projektbeschreibung
For a project at our banking client site we're looking for an experienced SYSTEM ENGINEER - SECURITY AUDITS (3953).
Our client is looking for a Compliance Engineer to work closely with the Infrastructure Compliance Validation (ICV) Change Management team to help improve its validation standards. EXPERIENCE IN IT/CYBER SECURITY OR SYSTEM ENGINEERING IS ESSENTIAL.
YOUR QUALIFICATIONS:
- EXPERIENCE IN OPERATING SYSTEM/MIDDLEWARE HARDENING AND SECURITY AUDITS
- Ability to implement audit checks based on Center for Internet Security benchmarks
- POSIX permissions model: RBAC, SUID/SGID, sticky bits, octal/symbolic notation etc.
- Ability to understand and write/modify .NET-compatible Regular Expressions
- Ability to set up a working lab environment required for testing of checks/standards
- Good understanding of:
- Configuration parameters in Apache, Tomcat and IIS
- Administrative security settings in AIX, Solaris, RHEL, Windows and ESXi
- Common infrastructure, including Active Directory, GPO and Kerberos
- User database roles, permissions-model, security settings in Oracle/Sybase/MS-SQL
- Familiarity with technologies and tools such as SELinux, netstat, grep, process table etc.
- PREVIOUS EXPERIENCE WITH SYMANTEC CONTROL COMPLIANCE SUITE IS CONSIDERED A PLUS
This role concentrates on developing, adapting and improving security assurance checks for the above mentioned ICV program.
The tasks:
- Working with colleagues to determine requirements, testing and developing compliance checks, risk ratings and score cards will be a key part of this role.
- Ensure our clients security controls comply with industry best practice
- Provide assistance with check development to Subject Matter Experts
- Develop hardening/security assurance standards for various IT platforms
- Create, maintain and update documentation in knowledge base
- Investigate root causes for common baseline check failures
- Escalate and liaise with internal/external groups when required
Are you ready for a new challenge and available October 1?
We look forward to receiving your application in MS-Word.
Our client is looking for a Compliance Engineer to work closely with the Infrastructure Compliance Validation (ICV) Change Management team to help improve its validation standards. EXPERIENCE IN IT/CYBER SECURITY OR SYSTEM ENGINEERING IS ESSENTIAL.
YOUR QUALIFICATIONS:
- EXPERIENCE IN OPERATING SYSTEM/MIDDLEWARE HARDENING AND SECURITY AUDITS
- Ability to implement audit checks based on Center for Internet Security benchmarks
- POSIX permissions model: RBAC, SUID/SGID, sticky bits, octal/symbolic notation etc.
- Ability to understand and write/modify .NET-compatible Regular Expressions
- Ability to set up a working lab environment required for testing of checks/standards
- Good understanding of:
- Configuration parameters in Apache, Tomcat and IIS
- Administrative security settings in AIX, Solaris, RHEL, Windows and ESXi
- Common infrastructure, including Active Directory, GPO and Kerberos
- User database roles, permissions-model, security settings in Oracle/Sybase/MS-SQL
- Familiarity with technologies and tools such as SELinux, netstat, grep, process table etc.
- PREVIOUS EXPERIENCE WITH SYMANTEC CONTROL COMPLIANCE SUITE IS CONSIDERED A PLUS
This role concentrates on developing, adapting and improving security assurance checks for the above mentioned ICV program.
The tasks:
- Working with colleagues to determine requirements, testing and developing compliance checks, risk ratings and score cards will be a key part of this role.
- Ensure our clients security controls comply with industry best practice
- Provide assistance with check development to Subject Matter Experts
- Develop hardening/security assurance standards for various IT platforms
- Create, maintain and update documentation in knowledge base
- Investigate root causes for common baseline check failures
- Escalate and liaise with internal/external groups when required
Are you ready for a new challenge and available October 1?
We look forward to receiving your application in MS-Word.
Projektdetails
Geforderte Qualifikationen
-
Kategorie:
IT Entwicklung, Ingenieurwesen/Technik