Cyber Security Specialist at Tower Group

Our Client is looking for a Cyber Security Specialist on a fixed term contract to start IMMEDIATELY.

Requirements:

• Degree
• Detailed knowledge on frameworks like IS027001 , NIST, CREST
• Network security (e.g. VPN/VRF, MPLS, routing protocols, layer 2 and layer 3 security) and network protocols (e.g. TCP/IP, HTTP, TLS, SSH, DNS)
• CLOUD
• 3 -5 years experience

Duties:

• Provide project security guidance, architecture and design input and design review.
• Specify security testing, and ensure that identified vulnerabilities are remediated;   Identify security risks, and ensure that these are managed effectively.
• Conduct internal and external security assurance scans.
•  Recommendation of appropriate tools and security countermeasures.
• Penetration testing of applications and infrastructure.
•  Vulnerability and risk assessment management.
•  Security assessments of network infrastructure, hosts and applications
•  Control design and implementation in Technology and related processes
•  Perform reviews on network technology processes, systems, infrastructure and networks with the aim of proactively enhancing the control environment

Key Accountabilities:

•  Apply subject matter expertise to secure our IT and Networks, products and services
•  Ensure project designs comply with Baseline Security Requirements and security policy                
• Ensure that projects integrate with security baseline controls such as IPS/IDS, WAF, Firewall
• Change Management, Identity & Access Management, SIEM and Vulnerability Management  
• Ensure internal customers, external suppliers and delivery partners are aware of security standards and future strategy to influence development roadmaps
•  Identify security risks, manage them with key stakeholders, and provide recommendations for risk mitigation.
•  Escalate deviations from baseline security requirements and security architecture.
• Technical leadership, supervision and development of Security Specialists and Analysts.
• Relevant Technology Experience.
• Application security / web-application security.
•  Mobile applications and their implications for security.
•  Operating system and database security (e.g. SQL vulnerabilities and encryption techniques)   Cloud and virtualisation security (IT and Networks).
•  Network security (e.g. VPN/VRF, MPLS, routing protocols, layer 2 and layer 3 security) and network protocols (e.g. TCP/IP, HTTP, TLS, SSH, DNS).
• Mobile Networks (2G/3G/4G) and/or large scale MPLS networks, and their particular security considerations.
•  Security considerations for Operational Support Systems, IP Telephony, SS7, IMS networks,
• SMS, MMS, Voicemail, Content Delivery Networks, SDH, DSL and Microwave.
•  Security control deployment / operation (e.g. Firewalls, Proxies, Network Access Control,
• IPS/IDS, Web Application Firewalls, Privileged User Access Management, Identity & Access Management, Data Loss Prevention, Security Information and Event Management, Vulnerability Management).