Previous Job
Security Analyst II
Ref No.: 18-05556
Location: Vienna, Virginia
Title: Security Analyst II
Location: Vienna, VA
Length: 6 months+ (could extend)

Provides IT network security engineering for new innovations, project designs, and standards development. Ensures adherence to defined Network Engineering Processes and identifies and helps influence platform strategic direction in coordination with business users' needs and direction.
Responsible for the fundamental organization of a system embodied in its components, their relationships to each other and to the environment, and the principles guiding its design and evolution. Includes all functions related to enterprise-wide data security, such as external pipes and firewalls.

Additional Responsibilities:

• Provide Firewall management and configuration according to defined standard guidelines and best industry practices.
• Work with Project teams to implement Security Solutions.
• Analyze firewall rules to categorize / prioritize the rules and recommend remediation action plans based on bank's Application types and Domain Boundary environment.
• Review Tufin zero-use rules to identify rules that can be removed and work with the appropriate bank teams to get those rules removed.
• Review Tufin partial -shadows rules and recommend best course of action to reduce shadowed rules
• Review bank's server / systems configuration & make recommendations as to best location for each system based on bank's target state Domain Boundary architecture
• Enterprise network security design standards
• Technology integration point with other bank Engineering towers to provide strategic solutions.
• Feasibility engagements with business groups to ensure integrated network strategies are incorporated early in the process.

Basic Qualifications:
• 3 Years of experience in all technical aspects of Network Security Engineering
• 2 Years of experience with Firewall technologies, including hardware refresh, software upgrades, and complex troubleshooting techniques.
• Experience with the development and deployment of Firewall Solutions in medium to large infra-structures
• Experience with advanced rulebase design, rulebase optimization, and global objects

Preferred Qualifications:
• Bachelor's Degree in Science, Engineering or Computers
• 2 Years of experience in Technical Leadership of medium to large IT projects
• 6 Years of experience in all technical aspects of Network Security Engineering
• 4 Years working experience with Firewalls, including Palo Alto, Check Point, and Cisco