Description
About the Role Are you someone who has a security mindset, enjoys working on a team and is curious about different technologies? If you want to be part of a dynamic team that is responsible for defining security guidelines and managing vulnerabilities for a wide range of technologies, then this job might be for you. You will have a unique opportunity to expand your reach in terms of knowledge, network and build your expertise through SWIFT's global platform. Key Responsibilities Define security guidelines for the configuration of different technologies (Operating Systems, Databases, Network devices and many others). Identify and automate repetitive and manual tasks in the day to day operations. Participate in the development of XML content used for automated security compliance assessments, based on CIS Benchmarks and/or DISA STIGs. Analyse non-compliances reported when running security benchmarks against SWIFT systems. Evaluate the security risk introduced by such non-compliance and advise on proper remediation steps. Research vulnerabilities, analyze their impact and advise on corrective remediation actions. Present and clearly explain this information to technology developers and support personnel. What will make you successful? Required technical skills Understanding of configuration hardening for at least one technology:
OS, Web Servers, Databases and/or Network Devices. Technical understanding of different types of vulnerabilities and familiarity with vulnerability scoring systems. Preferred technical skills Familiarity with Center for Internet Security (CIS) benchmarks and CIS tools such as CIS CAT-pro. Familiarity with regular expression and XML. Experience with automation/scripting (Perl, Python, PowerShell or others) System administration experience. Professional skills & competencies Autonomous, driven, with strong ability to quickly adapt and respond to change. Customer oriented and quality mindset - we continually strive to deliver true customer value. Open-minded, solutions oriented, and a true team player - gaining energy through collaboration with others. Education University degree in Computer Science, Information Systems, or a related field; or equivalent work experience.