Beschreibung
For our client, international bank based in Zurich, we are looking for:
Web Infrastructure Security Engineer
- Location: Zurich
- Duration: 6 months
Key Responsibilities:
As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data. You will help ensure that our software and infrastructure is designed and implemented to the highest security standards. You will work closely with other Engineers to enhance our application security. Top candidates will enjoy analysing designs and implementations from a security perspective and will be recognized experts at discovering security issues that appear under unexpected threat scenarios within a large financial institution. Security Engineers within the Data Protection and Application Security organization work on a wide variety of tasks and activities that are closely aligned with the bank's strategic programs:
Tasks:
- Ensuring that individual security solutions form an effective security system as a whole
- Creating detailed solution designs that fit well into bank's established platforms and core eco-systems
- Supporting product management and solution architecture in identifying effective solutions
- Providing 3rd level engineering support for security products
- Define use case, detailed technical specification and security baseline
- Evaluate, design and rate possible solutions and build a PoC
- QA: define test plan and execute tests
- Write operational manual and train operation team
- Manage unknown software issues/defects
- Report status/issues and project progress proactive
- Challenges Contractor will be facing in this role:
- Working in virtual teams environments across 2 time zones
- Supporting many projects simultaneously
- Engagement with stakeholders from multiple regions
Essentials Skills and Qualifications:
- Web Infrastructure Security Engineer must have the following skills:
- Proven track record of min. 8 years of work experience in IT and 2 years in a similar role
- Working knowledge & experience with the following areas in IT Security:
- Web Security technologies experience
- Working knowledge & experience of Linux or Unix (incl. Scripting - Shell, Perl)
- Internet Security technologies (SSL/TLS, Apache, etc)
- Internet Facing Application components (Web Application Firewalls, Reverse/Forward Proxies,
- Authentication Servers (Web Access Management, SAML, etc)
- Overall knowledge on security concepts (application security)
- Fluent written and spoken English
- Good communication skills both in verbal and written manner
- Proactive and highly motivated team player
- Graduate degree in Information Technology, Computer Science or related subject; alternatively an equivalent Reducation in one of these topics
Desired Skills and Qualifications:
- Experience in Banking IT
- Experience with software packaging and versioning systems (eg Subversion)
- Beneficial Java and Java build tools knowledge-J2EE, Servlets, JSPs
- Ability in finding long-term IT solutions even if you are under pressure due to an IT incident
- Experience in financial sector will be an additional asset
- Familiarity with MITRE and OWASP (CVE, CWE, OWASP CRS, Top 10)
- Engineering or security certification is an advantage: CISSP, CISA, CSSLP, MCSE, RHCE, CCNE, CCSE
Candidate Value Proposition:
- Excellent team culture and collaboration between sites
- State of the art security solutions we're implementing
- Implementing global solutions used in all location of the bank
- Quick knowledge transfer and on-boarding to real projects
- Ability to improve existing processes
- Internal knowledge exchange sessions
If you are interested in the role, please do not hesitate to contact me:
Nadja Espey (see below)