Description
Job purpose:
Job Description: Main Tasks & Responsibilities:
* Participate to the global Change Advisory Board (CAB) instance, assess and approve all Change Requests on behalf of IT Production Security.
Certifications preferred: ITIL V3, technical security certification.
Skills/Experience with:
* Good knowledge and hands-on experience of WAF (Web application Firewall or reverse Proxy) policies and tuning
* Good knowledge and hands-on experience of traditional and cloud Firewall rules management
* Good knowledge and hands-on experience of IPS signature assessment and update
* Understanding of network and Web related protocols (eg, TCP/IP, IPSec, HTTP, SSL, routing protocols)
* Experience working with SIEM technology, log assessment
* Knowledge of OWASP top ten critical web application security threats
* Experience in web database security and secure (web) application development SDLC.
Bonus skills:
* Knowledge of REST and SOAP Web Services Personal attributes:
* Ability to act under strong pressure and to manage efficiently crisis situations
* Working with security tools and API integration work including writing scripts and development of automation around detection and remediation activities.
* Familiar with IT Policy frameworks, Risk Management, and framework or standards such as ISO 27000 series, NIST, PCI, COBIT, SOX.
* Identification and remediation of OS and network security weaknesses and vulnerabilities
* Respond to reports, events, and incidents eg scanning, hacking, phishing
* Assess/identify false positive and false negative from real threat
* Ability to move seamlessly between a attacker mind set and a security defender mind set
* Hands on experience with vulnerability scanners
* Penetration testing experience
Spring Technology is acting as an Employment Business in relation to this vacancy.
Spring Technology is an Equal Opportunities employer; we welcome applicants from all backgrounds.