Security Analyst - Cyber Security, Qualys and/or Nessus, UNIX/AIX, ETL

Company: Software Management Consultants, Inc.
Location: Santa Ana
Posted on: May 4, 2020

Job Description:

Job Description Seeking a Senior Security Vulnerability Engineer for the following role - Duties Responsible for providing operational security solutions that would enable the success of IT and business initiatives. Interface with IT Groups across the company, client managers, business customers, third-parties, vendors, and auditors. You'll co-design (along with the Security Architect) and operationalize security solutions that can be effectively delegated to Security Analysts or other supportoperations functions. The scope of Security Engineers extends across technical and administrative controls that enable the protection and availability of business and IT systems. Experience with Qualys andor Nessus is a big plus. Essential Functions Providing technical engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement. Investigates, recommends, evaluates, deploys and integrates security tools and techniques to improve our ability to protect corporate assets and infrastructure. Participate in technical risk assessments and security exposure analyses of systems, networks and business applications. Evaluate and implement security devices such as firewalls, IDS, IPS, threat correlation tools, vulnerability management tools, encryption capabilities, etc. Analyzes network elements and designs to ensure secure and optimal system and network performance and cost effectiveness. Oversees the purchase, installation, and support of security devices. Responsible for assessing and managing information security risks to pre-existing current systems. Assists in the planning of large scale systems projects through vendor comparison and cost studies. Monitors, reports and resolves all security related problems and discrepancies. Participates as a member of the Information Security Incident Response Team. Interacts with internal and external clients on security requirements, identifies security process and develops strategiessolutions to security issues while maintaining tight security discipline. Develops test plan and implements rigorous testing prior to rollout of new systems into the production environment. Participates in Cyber Security Incident investigations. Skills Engineering Lead for Vulnerability Detection and Threat Management lifecycle, with focus on Qualys, Nessus andor Tanium. Must have solid hands on experience with multiple Qualys modules, including Asset Inventory, Vulnerability Management, Policy Compliance, File Integrity Monitoring, Container Security, etc Candidate will evaluate and design innovative solutions and architecture with a special focus on Engineering of Vulnerability Detection and Threat Management Life Cycle Keep up to date on new Cyber Security trends and threats. Advise on issues and recommend proactive measures. Participate on project working teams that introduce new capabilities and technologies to ensure that vulnerability and hardening exposure is managed. Experience in implementing Information Security technologies andor processes required. Experience in product evaluation and managing vendor relationships required. Experience in defining Information Security strategy and integrating security technologies into corporate frameworks. Note that in this role, you must have hands on working knowledge of UNIXAIX, Microsoft NT2000, firewall multi-layer design and implementation, router access listpacket filtering (CISCO), WANs, LANs, the Internet, Intranets, network protocols and network services (i.e., telnet, ftp, etc.), Intrusion detection systems, Virtual Private Network (VPN), two factor authentication.Experience with AzureAWS automated vulnerability scanning using scanners and agents. Experience with common software development patterns Experience with serverless computing a plus Ability to architect scalable solutions Experience with ETL and data integration Education B.S. in Management Information Systems or equivalent work or military experience Required Skills CYBER SECURITY QUALYS NESSUS UNIX AIX ETL. Don't hesitate! Submit your resume today. SMCI is an EEO employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, national origin, disability, age, genetic information, marital status, military, and veteran status. Members of minority groups, Vietnam Era Veterans and individuals with mental or physical disabilities are encouraged to contact us regarding employment opportunities. In addition, in order to support the provision of business to minority-owned and Women-owned businesses (MWBE), such MWBE are encouraged to contact us regarding subcontracting business opportunities with our firm. (No third parties, please) (H1 sponsorship currently unavailable) (Local candidates only, please)

Keywords: Software Management Consultants, Inc., Santa Ana , Security Analyst - Cyber Security, Qualys and/or Nessus, UNIX/AIX, ETL, IT / Software / Systems , Santa Ana, California