Our client is looking for a Director of Security.
Responsibilities include:
?Managing the Information the Security Team
?Providing leadership and mentoring to the team
?Driving the development, maintenance, and execution of the infosec roadmap
?Owning all Information Security related tasks and responsibilities
?Working with the infrastructure, Support, Product, and Engineering Teams to deliver and secure quality products and services to our employees and clients.
?Securing our IaaS, SaaS, and On-Premise environments
?Managing all layer 2 and 3 networking devices
?Fostering a DevSecOps culture
?Implementing Secure Software Development Lifecycle
?Implementing “Infrastructure as Code” methodology
?Owning the Information Security Policy
?Participating in audits and assessments
?Delivering a risk management framework
?Responding to incidents and alerts
Experience/Skills:
?College Degree in Information Technology, Computer Science or a related field
?10+ years of experience working in an Information Technology position
?3+ years managing or leading an Information Security team
?Project and program management experience
?Excellent communication and interpersonal skills necessary to develop relationships
?Industry recognized certifications a plus
?CISSP
?Offensive Security - OSCP, OSCE,OSWE
?GIAC - GCFA, GWPT, GPEN,etc
?Security+
?AWS Experience required:
?Infrastructure as code (Terraform, CloudFormation)
?Networking (VPC, VPN)
?Security (IAM, MFA, Least Privilege Access Model)
?Technical Experience:
?DFIR (Digital Forensics and incident response)
?penetration testing
?Experience with vulnerability management products and program
?Mobile Device Management solutions
?Firewall deployments, rule creation, and monitoring
?SAML and SSO
?Securing cloud IaaS and SaaS implementations
?Endpoint security products
?Deploying and maintaining logging solutions(SEIM)
?Encryption
¦PKI - x.509 Root CA, PublicCerts
¦KMS
¦Encryption at rest and in transit solutions
¦SSL/TLS Decryption
?Networking experience
¦Layer 2 - Wireless Network, WiredSwitches
¦Layer 3 - NetworkFirewalls
¦Remote Access and Site to Site VPN
¦Security
?Authentication - 802.1x andRADIUS
?IDS/IPS
?Application Layer Inspection
?SSL Decryption
?Experience with scripting languages such as Python, Powershell, Bash, JavaScript
?Experience using code version control systems(Git)
Team Size:
?Information Security Team consisting of Security Engineers
?Larger Technology Department consists of engineering, Product, InfoSec, Infrastructure, and support teams.
?Small team, lots of knowledge domains covered
?Enterprise-grade products and software
?Leading vendors and solutions