Security Solutions Engineer

The goal of the role is to design and operate a framework for assessing the risk of connectivity required compensating controls and for approving or rejecting the use of Security ACL in place of Firewall.

Tasks

• Defining criteria and standards for the use of Security ACLs aligned with Citis risk appetite.
• Define metrics for evaluation and reporting connectivity risk.
• Define and develop test methodologies and verifications for the effectiveness of Security ACLs.
• Desing framework and automation for managing Security ACLs
• Manage approval of Security ACLs
• Own and maintain the product life cycle of the products belonging to the Security ACLs management solution (software/hardware versions patch management vulnerability threat management End of Support) from an engineering point of view
• Engage with other engineering streams Architecture forums and Citi businesses to develop solutions to meet current and future operational and security requirements in accordance with Citi certification standards and procedures. Maintain relationship with key industry partners and vendors in the security field

Requirements

• Experience with multiple security disciplines and to understand layered defense concepts
• Understanding of Cyber Kill Chain
• Familiar with Encryption and key management
• Deep understanding of TCP/IP technologies
• Firewall IDS/IPS knowledge is required
• Vulnerability assessment or security audit experience is a plus
• Scripting Knowledge is desired (bash or python)
• Vendor independent industrystandard based knowledge with threat and risk focused mindset.
• The candidate will have strong understanding of Technology Risk