Surface Attack Network FW Expert - Remote in Colombia Main Activities / Responsibilities: Systems Architecture: Ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures. Vulnerability Assessment and Management: Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities. Provide technical support for security issues related to in-scope network infrastructure. Cyber Operations: Conducts collection, processing, and/or geolocation of systems to exploit, locate, and/or track targets of interest. Performs network navigation, tactical forensic analysis, and, when directed, executes on-net operations. Incident Response: Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities. Security in Network Infrastructure Changes and Configuration: Review requests for new systems or changes to existing systems and evaluate the impact to security. Use the best practices and security standards to guarantee the integrity, confidentiality, and availability of information and data. Job Scope: IT Security Projects: Point of Contact of Security Projects. Incident Management: Investigate and support Security Incidents. Knowledge, Experience and Competencies: Qualifications: Bachelor's degree in Computer Science, Engineering, or related discipline with an IT focus. Desired Certifications: CISSP, CISM, CISA, ITIL, ISO 27001. Required Experience: At least 5 years of experience in IT Security, management of network infrastructure, including implementation and maintenance, delivering IT security projects, assessments, and audits. Desired Experience: Experience of security incident handling & response. Knowledge in cryptography, data protection, and privacy protection. Experience of more than 5 years in the creation or monitoring of information systems architecture. Strong knowledge of regulatory requirements (e.g. Sarbanes Oxley Act, Solvency II) and security policies, frameworks, and standards like NIST, SOC2, ISO 27000. Desire at least B2 English Level. Soft skills: Experience coordinating and completing multiple tasks within established and changing deadlines. Excellent organizational, analytical, and independent problem-solving skills. Demonstrated excellent oral and written communication skills necessary to interact effectively with colleagues and with users of varying technological skill levels. Strong customer / end-user / client service orientation. Thrives working in a highly collaborative and team environment. Highly self-motivated and directed. Keen attention to detail. Capability for problem-solving, decision-making, sound judgment, assertiveness. Ability to deal with difficult situations, unclear priorities, and blocking stakeholders. Ability to work decisively under heavy workload considering the criticality, urgency and extended work hours required to ensure availability of the service in accordance with service level commitments. Ability to manage multi-cultural and multi-located teams. Leadership skills: Lead by example on values and culture. A natural leader whose personality and communication skills instill a sense of credibility and trust. Able to coherently explain the proposed design and gain stakeholder buy-in to the proposed solution. Cost conscious and keeps a big picture perspective. Specialized Technical Skills: Incident and Response Management Process. Authentication and Access Control Tools, Management and Administration. Vulnerability Management process. Security Architecture & Infrastructure Concepts. Knowledge of project methodologies such as PMI, Lean or Scrum work frameworks. Knowledge Security controls like Firewall, Proxy, Malware Detection, PAM, SIEM, Endpoint protection (EDR), Vulnerability scanning and so on. Languages: English required (written & spoken) Spanish required (written & spoken) Mobility requirements: Schedule: Monday to Friday from 9 to 6 or from 8 to 5 to be determined. #J-18808-Ljbffr
