Security Management #017

Delan Associates•Tallahassee, FL

24d

About The Position

Delan Associates, Inc. is seeking candidates for ongoing security management job opportunities in the Tallahassee, Florida area. The posting describes five roles in the Security Management job family: Security Analyst, Data Security Specialist, Network Security Specialist, Systems Security Specialist, and Web Security Specialist. The Security Analyst develops and manages security across multiple enterprise IT functional areas, including data, systems, networks, and/or Web operations. The role helps develop and implement security policies and procedures, prepares security status and risk reports, tracks software viruses, administers and monitors security profiles, investigates possible security exceptions, and maintains security controls. It also supports business and IT staff, educates users about security policies, evaluates security products and procedures, and contributes security expertise to IT projects. The posting describes junior work as focused primarily on security administration and senior work as involving enterprise security strategy, security project management, and complex security issues. The Data Security Specialist plans, designs, enforces, and audits policies and procedures that protect enterprise systems, files, and data. The role responds to security violations, assesses risks, advises management on critical security issues, evaluates security products and procedures, and oversees security awareness and education. It also identifies when existing data security policies should change or new ones are needed. The Network Security Specialist supports the full life cycle of network security management. The role helps develop and implement network security policies and measures, configures and monitors firewalls, conducts security assessments and compliance reviews, prepares risk and status reports, and contributes to network infrastructure improvements and adoption of security technologies. It also evaluates security products and educates users. The Systems Security Specialist develops, evaluates, and manages enterprise systems security, including account management, password auditing, vulnerability scanning, virus management, and intrusion detection. The role helps develop and implement security policies, monitors security profiles, investigates possible exceptions, documents security controls, evaluates products and procedures, and supports and educates business and IT users on systems security. The Web Security Specialist helps develop and manage enterprise Web security policies and procedures. The role evaluates security solutions for Internet, intranet, and extranet environments; monitors firewall and intrusion-detection configurations; assesses e-commerce applications for security compliance; reviews products and recommends security solutions; prepares status and risk reports; and administers security profiles and controls. It also educates users on Web security standards and practices.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
Security Analyst: At least 4 years of combined IT and security work experience, including broad exposure to systems analysis, application development, database design, and administration; 1–2 years of information security experience.
Data Security Specialist: At least 4 years of IT work experience, including broad exposure to systems analysis, application development, database design, and administration; 1–2 years of information security experience.
Network Security Specialist: At least 3 years of combined IT and security work experience, with broad exposure to infrastructure/network and multi-platform environments.
Systems Security Specialist: At least 2 years of combined IT and security work experience, with broad exposure to infrastructure/network and multi-platform environments.
Web Security Specialist: At least 3 years of combined IT and security experience, with broad exposure to infrastructure/Web and multi-platform environments.
Knowledge of security issues, techniques, and implications across existing computer platforms.
Security Analyst: Extensive knowledge of networking, databases, systems, and/or Web operations.
Network Security Specialist: Broad technical knowledge of client/server systems, network topology, and network/infrastructure security.
Systems Security Specialist: Technical expertise in systems administration and security tools, and broad technical knowledge of network operating systems such as UNIX and NT.
Web Security Specialist: Knowledge of client/server and Web technologies and a strong understanding of e-commerce operations.

Responsibilities

Develop and manage security across enterprise IT functional areas, including data, systems, networks, and/or Web operations.
Assist in developing and implementing security policies and procedures, including authentication, breach escalation, auditing, firewall, and encryption practices.
Prepare security status reports, risk analyses, and response procedures.
Track and monitor software viruses.
Administer and monitor security profiles; review security violation reports; investigate possible security exceptions; and maintain and document security controls.
Evaluate and recommend security products, services, and procedures to improve productivity and effectiveness.
Provide security-related support and consultation to business and IT staff, and educate users about security policies and practices.
Represent organizational security needs and provide security expertise on IT projects.
Plan, design, enforce, and audit policies and procedures that safeguard enterprise systems, files, and data; act on security violations and identify policy changes or additions as needed.
Provide management with risk assessments and security briefings, and oversee data security awareness and education programs.
Manage network security through firewall configuration and monitoring, security assessments, compliance reviews, infrastructure improvements, and implementation of security technologies.
Develop and manage systems security, including account management, password auditing, vulnerability scanning, virus management, and intrusion detection.
Evaluate Web security solutions, monitor firewall and intrusion-detection configurations, and assess e-commerce applications for compliance with security policies and standards.