Senior Information Security Engineer

Req ID: 1318

Job Title: Senior Information Security Engineer

Group: Automation and Sys Svcs Group

Location: HO - New York, NY (Head Office)

Job Status: Full-Time

Area Overview:

The Security Engineering Team is responsible for providing security consulting, security assessments, and security software support within the Second District. The Security Engineering Team serves on the Bank?s Emergency Response Team for Computer Security Incidents, and incorporates the Local Incident Response Team, which is the Bank?s interface with the National Incident Response Team (NIRT).




Job Responsibilities:

- Provides consultative support to client management and
staffs in web, application, system, and network
security design;
- Performs security reviews of software and hardware
prior to purchase;
- Performs security assessments of applications and
related infrastructure;
- Assists in the implementation of security plans,
products, and control techniques;
- Is responsible for researching potential computer
attacks and probes as they are identified;
- Handles up-to-date threat and vulnerability profiles,
including respective counter measures;
- Investigates and recommends appropriate corrective
actions for information security incidents;
- Provides effective communication with the
implementation staff responsible for taking corrective
actions for security threats and vulnerabilities;
- Identifies and escalates changes that will affect
information security policy, standards and procedures;
- Performs all assigned duties in compliance with the ISO
9001 quality management standard.



Job Requirements:


- Bachelor?s degree in Computer Science, Engineering or a
related discipline and/or at least five years of
demonstrated experience in web security design and
forensic techniques;
- Proven experience in one or more of the following:
configuration/ administration/ management in Windows
(NT,2000, XP and 2003), Active Directory, Database
Environments (Oracle, MS-SQL and Database security),
LDAP, Linux, Sun Solaris, routers & switches,
firewalls, intrusion detection systems, and web servers;
- Programming and scripting skills: Multi-tier web
application environments, Java/J2EE, ASP, .NET,
ColdFusion, WebSphere and shell scripting;
- Demonstrated experience with vulnerability assessment
tools and techniques (particularly web application
assessment);
- Demonstrated ability to provide security guidance and
recommendations throughout the software development
lifecycle;
- Theoretical and practical knowledge of current security
threats, vulnerabilities, exploits, and
countermeasures, and experience in vulnerability
remediation in an operational environment;
- Proven project management skills;
- Familiarity with security protocols and legislation
related to information security;
- Demonstrated ability to develop, test, and implement
security plans and network architecture;
- Excellent analytical ability;
- Ability to coordinate supporting documentation;
- Team player with excellent consultative and
communication skills, and the proven ability to work
effectively with clients,
IT management and staff, vendors and consultants; and
- CISSP certified /qualified or ability to actively work
towards obtaining the certification.