Description
Reference Nr.:4097CD
Industry:
Bank
Location:
Zürich und Region
Start:
asap
Duration:
6 months
Project description:
There are several firewalls controlling access to protected zones. There are additional firewalls providing ancillary services. These firewalls have a large number of rules some of them obsolete and partially overlapping. This makes it hard to understand which access is allowed and which access is blocked. As a consequence it is difficult to ensure that data is properly protected and that only those connections are open that should be open. The bank has a remediation project funded which removes this risk.
Tasks that needs to be performed by the Contractor:
- Analyze rules on the firewall based on statistics and other information
- Work with the application teams to understand the impact of rule changes
- Propose changes or drops of rules
- Implement the rule changes and track outcome together with the onsite project team
- Make suggestions on how to further improve the firewall settings
Required Skills/Experience:
* Experienced security engineer with firewall configuration and remediation background and a minimum of 5 years background in this space
* The project deals with a large firewall rule remediation for the Swiss restricted zone of the bank and requires a deep know of firewall concepts.
* It also comprises close collaboration with the applications in scope that the rules apply to. We thus require a person with good communication skills who can lead the application teams to come to a conclusion on the rules that can be dropped or transformed
* Preferably the person has worked with firewall management tools such as Tufin
* Preferably the person has worked in the financial industry before
Languages:
* English is a must to have. German is nice to have.