Network Security Specialist II

September 12

Apply Now

Receive Emails with Similar Jobs

TollPlus

WebsiteLinkedInAll Job Openings

TollPlus offers premiere back-office toll solutions, a strong focus on technology, and continuous R&D efforts.

Electronic Toll Collection • Traffic Enforcement • Parking Management • Fare Collection • Smart Cities

501 - 1000

Description

• Maintain integrity and confidentiality of company data and information systems by taking proactive measures via monitoring the environment for unauthorized users, unusual activity, and security threats, applying patches, responding to alerts/vulnerabilities by researching and making recommended configuration changes, blocking non-false positive threats, and updating security controls and access lists. • Corrective measures will be taken promptly, and a report will be provided on security measures taken to address threats. • Other duties include configuring, testing, maintaining, and monitoring network intermediary devices, which include switches, routers, firewalls, and intrusion detection systems, performing security audits, creating documentation for PCI DSS standards and other security requirements, and training staff on security policies. • Include the following. Other duties may be assigned. The order of the duties listed does not represent the importance and/or percentage of time dedicated to each duty. • Experience with PCI DSS Audits and ability to provide evidence of compliance, remediations, and other PCI requirements. • Able to monitor threat detection, and test encryption technologies such as SSL, tokenization, and VPN. • Experience with IT security policies, controls processes, procedures, security tools, and technologies to protect applications, data, privacy, operating systems (Windows and Linux), and the network infrastructure. • Develops plans to safeguard data and information systems against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs. • Train users to promote security awareness to ensure overall system security; training includes administering incident response exercises to address potential system vulnerabilities and breaches. • Configuration, testing, deployment, and maintenance of encryption technologies (i.e. PGP, GPG, SSL, VPN, and tokenization) to protect confidential information as it is being transmitted to prevent tainted digital transfers. • Perform web server configuration for Windows and Linux operating systems to harden/secure the environment. • Configure, test, deploy, and maintain Cisco Layer 2 and Layer 3 switches, routers, and firewalls. • Utilize various security monitoring services and devices (i.e. SIEM, WAF, Web Filter, Spam Filter, Network Protocol Analyzer, Internal and External Vulnerability Scans) for proactive and forensic analysis and response. • Perform routine security and network checks as required by PCI DSS standards and internal policies and procedures, this includes performing a daily review of all logs from servers, routers, firewalls, IDS, security appliances, etc. • Test and distribute patches within one month of release • Communicate professionally with users and vendors verbally and in written form. • Write technical documentation to comply with PCI DSS standards and create and maintain network diagrams. • Rotation of on-call support. Will require some night and weekend work for scheduled production maintenance and emergency support.

Requirements

• Ability to work with minimal direction in a fast-paced/high-pressure environment. • Ability to prioritize tasks and directly support the department managers. • Good troubleshooting and error isolation skills. • Ability to work independently on assigned tasks as well as to accept direction on given assignments. • Must be able to interact and communicate with individuals at all levels of the organization. • Experience with Windows-compatible computer hardware, software, and TCP/IP networking • Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems. • Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions. • Considering the relative costs and benefits of potential actions to choose the most appropriate one. • Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming. • Must be willing to work additional hours as necessary • Excellent communication and documentation skills • Experience working with Windows servers, including Active Directory and proper disk configurations • Familiarity with PCI audit • Familiar with PCI industry standards such as ISO, NIST Framework, PCI DSS Compliance • Experience with PCI DSS compliance preferred.