Author name: Bruce

I have been doing IT and Cybersecurity specifically GRC for 20 years. I want to help people get into this field.

Uncategorized

Sr. System/Network Engineer – BMC Remedy (CNOSS)

for Vortechx Applied Technologies, LLC in Fort Huachuca, AZ 85613 (map) Roles and responsibilities As a Systems Engineer – Senior, you will provide services in support of the NETCOM, ACofS, G-3 with technical integration, design and planning support to define and manage Global Ticketing Consolidation (GTC) Bridge to Enterprise Service Management System as a Service (ESMSaaS) BMC Remedy/ITSM 8.x deployment throughout the Army-managed environments consisting of the theater and functional organizations operating within the Non-Secure Internet Protocol Router Network (NIPRNET) and Secure Internet Protocol Router Network (SIPRNET). As a Systems Engineer – Senior you will perform a broad range of engineering functions ranging from Windows and Linux OS support to Active Directive Directory and DNS to Out of Band Management (OOBM) and Identity and Access Management (IdAM) services. Additionally our Deployment Engineers will provide infrastructure support related VMware vSphere ESXi 5.x, PKI, Cisco Routing, and F5 Load Balancers among others. Highlights of Responsibilities: o Support the Gov. in the strategic planning, execution, and management for the design, build and deployment of BMC/Remedy ITSM 8.1 x applications built on VMware, MS Server and SQL, integrated in to Army NIPR & SIPR, including IAVM functions (vulnerability scanning/patching) o Provide engineering support for network infrastructure such as proxies, load balancers, encryption, remote access servers (terminal servers/Citrix servers), Remote client access, Network Admission Control (NAC), VPNs, SSL accelerators, WAN optimizers, DHCP controllers, and performance analyzers) o Analyze engineering data to support network performance, security, and capacity planning in accordance with Army regulations, directives, and policies. o Evaluate and provide recommendations for current/emerging technologies and methodologies to ensure Army Enterprise standards are maintained. o Perform engineering in a Government lab to support the testing, evaluation, installation, and integration of s/w and h/w into the enterprise o Coordinate and support the execution of site surveys, gap identification, pilots, and deployments. o Provide design and implementation support for migration of operational organizations identified by NETCOM to the Enterprise system. o Conduct Information Assurance and Vulnerability Management functions (to include vulnerability scanning and patching) related the Remedy ITSM 8.1 integrated system. o Support the development and coordination of guidance and plans, to include operational mission needs, functional priorities, architecture considerations, implementation, and acceptance for assigned CMDB/SS applications. o Coordinate, Review and maintain documentation, to include System Design Plan; Engineering Implementation Plan; Migration Plan; Engineering Change Proposals; Implementation Support Plan; System Integration Test/System Integration Plan; CM Plans; DIACAP package; Change and Release Plans. o Provide Development Lab maintenance and confirmation management, developing and executing processes that ensures security, accessibility, data integrity, recoverability and sustainability. o Support the development of integrations with capabilities/tools suites to include: System Center Configuration Manager; System Center Operations Manager; ArcSight; CA-Spectrum capability management and engineering staff; Out of Band Management; Identity and Access Management; Identity Synchronization Service/ IdSS Machine Interface. Travel: 25% Job Type Full time Location Ft. Huachuca, AZ Skill set Requirements: * Current Active Secret Security Clearance and or the ability to obtain one; IT Level I and SSBI in accordance with AR 25-2. * Bachelor’s Degree with 4+ years practical experience; or 12+ years of practical experience or 8+ years in Server Administration (Microsoft Windows environment, Microsoft Windows Server (minimum 2008) or Red Hat Linux OS. * IAT Level III certified as specified in DOD 8570.01-M and BBP 05-PR-M-0002 (CISA, GCIH, GCED, CISSP, CASP IA Certifications). * Working knowledge of operating systems (Linux, Microsoft, Cisco Internet Operating system (IOS), Juniper Operating System (JUNOS)), screen OS, data packet routing, switching, proxy services, and engineering for IP data networks. * Ability to obtain the Microsoft Certified Associate (MCSA or higher; or Red Hat Certified Administrator (RHCSA) or higher; or VMWare ESX 5.x or ESXi 5.X or higher; or CCNA or equivalent Computing Environment (CE) certification within six months of start date. Preferred Education and Experience: * Three to five years of experience in implementation and sustainment of NetOps capabilities across all operational and strategic echelons in the Land Warrior Network (LWN) to include Joint components in support of the Army’s GNE/NSC. * Three to Five years of working experience in the following areas listed below: BMC Remedy/ITSM (minimum 7.6); Microsoft Windows Server (minimum 2008); Active Directory; Public Key Infrastructure (PKI); SQL (minimum 2008); VMware vSphere ESXi 5.x – (Networking, virtual switches and virtual distributed switches); vCenter Server 5.x; VMware vSphere Storage Appliance (VSA); CISCO Routing (fundamental understanding TCP/IP topology, layer 3 routing, VLAN); SAN knowledge – (Fibre channel, iSCSI, NFS); Microsoft Office, especially Project and Visio. * Have experience in all aspects of the Information Technology (IT) DMZ security and security-in-depth applications for firewalls (Juniper and Cisco), Virtual Private Networks (VPN) (Juniper and/or Cisco), proxy servers (BlueCoat), intrusion detection/prevention (Internet Security Systems (ISS) and/or McAfee), network traffic analyzers (NetScout and/or WireShark) routers (Cisco and/or Juniper), switches (Cisco and/or Juniper), and network segmentation and containment applications using routing, virtual local area network (VLAN), and other related methods. * Knowledge of DISA Security Technical Implementation Guide (STIG), Security Content Automation Protocol (SCAP), and hardening using DISA Benchmark, which is an automated STIG in conjunction with an SCAP compliant tool to provide automated compliance reporting for the STIG. * Operational and integration knowledge across the following or similar technologies: System Center Configuration Manager (SCCM) (minimum 2007); System Center Operations Manager (SCOM) (minimum 2007); ArcSight; CA Spectrum Product Family (minimum 9.2); Out of Band Management (OOBM); Identity and Access Management (IdAM); Identity Synchronization Service (IdSS)/ IdSS Machine Interface (IdMI); and AVNET/Seamless Connectors Work experience 4+ Upper salary range $140,000 – $150,000

Uncategorized

System Engineer IV in Salem, Oregon

System Engineer IV – Field Technician position must have the following experience or credentials: Knowledge and skill (please specify in Offer) Understand architecture technology and product requirements. Have demonstrated experience and knowledge in set-up and configuration. Familiar with industry standards and vendor specifications. Take direction from the ETS Technical Leads. Participate in planning and review sessions when designated. Attend scheduled team meetings one or more aspects of the Project, including pre-migration analysis of the existing server configurations, developing configuration files for the replacement servers, technical support of on-site technicians during the equipment replacement. Steps will include configure, deliver, install, migrate and replace approximately 100 servers located in approximately 100 state agency offices. Pre-Migration work will typically be performed during normal business hours, however the actual server migration support and installation roles would include after-hours, and weekend work General Skills and Knowledge: •     Solid understanding of VMware including V2V and P2V •     Strong troubleshooting skills in server and network •     Must have Customer Service skills and experience •     Ability to communicate directions clearly and effectively •     Must be able to lift 50 plus pounds •     Valid Driver’s license, must provide own vehicle and insurance (mileage will be reimbursed) Specific Skills and Knowledge: •     In-depth knowledge/experience of how to configure Windows Servers. •     Ability to build a VMware Host, •     Specific knowledge/experience VMware, Microsoft products including Windows and network •     Specific knowledge/experience with HP server hardware •     Ability to troubleshoot connectivity and configuration issues remotely •     A+ Certification, Server + Certification, Network + Certification, Microsoft Certified? At least 2 years working experience with VMware and at least 4 years of Microsoft Windows experience Skills and Attributes:- The successful Contractor’s Key Person(s) and any other staff delivering services under the Work Order Contract must demonstrate the following attributesand skills throughout the course of performance: Communication: Strong communication skills, both verbal and written, are required. Contractor shall effectively communicate with agencystakeholders that have a variety of different skill sets and personalities, including technical, business, and management staff. Risk management: Contractor shall be proactive in gathering information, identifying issues and recommending solutions so that the Projectcontinues to move forward quickly. Technical knowledge: Contractor must have sufficient technical knowledge to understand and help resolve technical issues. Organization: Contractor shall organize and manage tasks for the Project.   Description: This opportunity is for a System Engineer IV Authorized Agency is seeking a Contractor with senior experience level individuals to provide staff augmentation to support a large-scale replacement of servers installed in the offices of State agencies throughout Oregon (“Project”). This expected duration of this project is about six months. Contracted services will provide support to one or more aspects of the Project, including pre-migration analysis of the existing server configurations, developing configuration files for the replacement servers, technical support of on-site technicians during the equipment replacement. Steps will include configure, deliver, install, migrate and replace approximately 100 servers located in approximately 100 state agency offices. Skill Set requirements include but are not limited to. Responsible for the planning and engineering of an organization’s systems infrastructure. Includes the implementation and design of hardware and software. Monitors the performance of systems. Typically requires a bachelor’s degree in area of specialty and at least 6 years or equivalent experience in the field or in a related area. Familiar with concepts, practices, and procedures within a particular field. Relies on extensive experience and judgment to plan and accomplish goals. Performs a variety of complicated tasks. Works under general supervision. May lead and direct the work of Contractor staff. A wide degree of creativity and latitude is expected.  Thanks & Regards Devendra Singh Team Lead 908-765-0003 Ext : 308

Uncategorized

Adobe Acrobat Reader DC STIGs, V1R1

DISA has released the Adobe Acrobat Reader DC STIGs Version 1.  The requirements of the STIGs become effective immediately.  The STIGs are available on IASE at http://iase.disa.mil/stigs/app-security/desktop/Pages/acrobat.aspx.

Uncategorized

Cybersecurity Engineer IDS/IPS Specialist

Cybersecurity Engineer IDS/IPS Specialist Harrisburg, PA/REMOTE work 12+ month contract- possible temp to perm Responsibilities Configuration, management, and maintenance of globally located Juniper SRX and Netscreen firewalls. Act as an externally facing point of contact to coordinate security response from networking vendors. Review new platforms, designs, and services to ensure sound network security practices are considered. Assess the impact of current network security advisories and publications. Participate in a periodic on-call rotation to support a 24-hour, seven-day operation. Minimum qualifications BS degree in Computer Science, Electrical Engineering, or related field or equivalent practical experience. 8+ years of experience in the configuration and management of Juniper firewalls. Deep level of understanding of both Junos and ScreenOS operating systems. JNCIP-SEC Certification Proven written/documentation and verbal communication skills. Experience with TCP/IP, IPv6, Multicast, VRRP, HSRP, DHCP, TACACS+, RADIUS, SNMP and syslog protocols. Knowledge of network-based and system-level attacks and mitigation methods. Familiarity with common network security industry practices, forums, and institutions. Understanding of Internet backbone routing. Preferred qualifications Network certifications – JNCIE, CCIE Security certifications – JNCIE-SEC, CISSP, CEH, Security+

Uncategorized

CYBER SECURITY ANALYST Job Listing at Kelly Services in Sunnyvale, CA

The Vehicle CyberSecurity Researcher is responsible for performing vulnerability and penetration testing against Nissan’s vehicle product line. The Researcher will be responsible for maintaining lab equipment, documenting and reporting on security events, incidents, and investigations. The Researcher uses best practices and generally acceptable techniques to identify potential issues and then engages with engineering to remediate the issue. The Researcher also must work closely with other departments (legal, Internal Audit, Engineering, Government Affairs, communications, etc.). Minimum Requirements:  Advanced knowledge of operating systems (Windows, AIX, Linux, Solaris) Advanced knowledge of Object-Oriented Programming  (OOP) and development life cycles Microsoft Office (Word, Excel, Visio, Project) 15+ years of relevant work experience Advanced knowledge of networking technologies Project Management Qualifications Essential Job Functions Required: • Advanced knowledge of vehicle systems, autonomous driving, vehicle-to-vehicle communications, etc. Beneficial: • Nessus, IDA Pro • Advanced knowledge of networking technologies • Project Management Education/Certifications: • Bachelor’s Degree (in an engineering or computer science related field) Important information: This position is recruited for by a remote Kelly office, not your local Kelly branch.  To be considered for this position, you must apply now to submit your resumes.  If you have questions about the position, you may contact the recruiter recruiting for this position by email.     SALARY: Open (based upon experience and qualifications)   There is no relocation budgeted for this position. If this position requires you to relocate you will be responsible for those costs.   At this time we are not in the position to offer any type of sponsorships or VISA transfers for this position.    

Uncategorized

Requirement of McAfee Engineer Position

We have an urgent opening for McAfee Engineer in Reston, Virginia .Let me know if you are available please send your updated resume with the following details. If you interested for this position I will schedule a call with my manager he will discuss you regarding Job description and Rate part This Position is for Contract-W2 Location: Reston, VIRGINIA Position: McAfee Engineer Client:  IBM Build McAfee agents (AV, etc) for Windows 2012 Servers. – Complete the certification of McAfee Security Products for Network Area Storage (NAS) with NetApp. – Test the latest version of the McAfee Security suite – Create the test plans, implementation plans, backout plans and shakeout plans. – Document the test results along with screenshots. – Capture issues, risks and remediation items. – Upgrade/Implement the McAfee Security suite. – Work on building the McAfee security image that can be used for NetApp for NAS. – Help trouble shooting the Windows 2012 Server build , NetApp build, etc. – Help with testing, documentation, and rollout of McAfee’s latest versions and patches. – Provide updates and status to the manager on an ongoing basis. – Complete adhoc tasks and activities requested by the manager to support the projects. QUALIFICATIONS: 5  years of McAfee ePO and Security suite engineering or administration. Experience rolling out McAfee Security suite for 25K   endpoints. Experience rolling out McAfee Security products to Windows 2012 Servers. 5  years of experience working with Desktop Security and related products. 5  years of overall IT security experience. Experience with sketching out network diagrams using Visio or other tools CISSP certification is preferred Note: If any of your friends are looking for this position please feel free to communicate with us. Softthink Solutions Inc., 299 Herndon Parkway, Suite # 110, Herndon, VA – 20170 Direct: 703-348-0807  

Uncategorized

Systems Analyst – Senior Highlands Ranch, CO

updated resumeaditistaffing.com or call to 425 457 7934                                                                                            Title –  Systems Analyst – Senior Location – Highlands Ranch, CO Duration of assignment and possible extensions: 1 year. May be some potential to extend or convert. Must have skills • Bachelor’s degree in engineering, computer science or a related field OR related certification is required. • 5-8+ years information security experience (ID & Access Mgt) • Working knowledge of Oracle Identity Management suites (OIM) • Strong knowledge of the UNIX/Linux systems administration, Unix Enterprise Directory, and Privileged access management tools (e.g. Unix Privileged Manager, Random Password Manager, etc.). • Scripting in UNIX • Familiar with security concepts such as PKI, SSL, and encryption • Manage access controls for Visa key information resources residing on multiple platforms, with a focus area in UNIX, Linux and databases (MS SQL, ORACLE, DB2). • MUST be able to work onsite in Denver Nice to have skills Post graduate degree a plus • CISSP, CISA, CISM and other comparative information security certifications are preferred • Development experience a plus (Java, C#, VBScript, Perl and Shell script, etc.) • Proficiency in Microsoft Office Applications, experience developing applications in Excel VBA. Roles and responsibilities • Manage access controls for Visa key information resources residing on multiple platforms • Needs to be familiar and comfortable to use local commands, scripts and tools to perform job tasks. • See JD for more Preference on industry background or previous companies worked for? Description Position Summary The ideal candidate for position will be a proactive and self-motivated professional who will work with other team members to manage access controls for Visa key information resources residing on multiple platforms, with a focus area in UNIX, Linux and databases (MS SQL, ORACLE, DB2). The successful candidate should be familiar and comfortable to use local commands, scripts and tools that will be used to perform job tasks. Qualifications • Bachelor’s degree in engineering, computer science or a related field is required. Post graduate degree a plus • 5+ years information security experience required • Strong knowledge of the UNIX/Linux systems administration, Unix Enterprise Directory, and Privileged access management tools (e.g. Unix Privileged Manager, Random Password Manager, etc.). This includes good analytical and troubleshooting skills on all platforms and tools supported. • Working knowledge of Oracle Identity Management suites • In-depth and proven knowledge in building automated solutions using various coding languages will be an added advantage (Java, C#, VBScript, Perl and Shell script, etc.) • Proficiency in Microsoft Office Applications, experience developing applications in Excel VBA. • Ability to gather and document business requirements and implement solutions to address them

Uncategorized

Network Security Engineer in St. Paul, MN

Job Title:        Network Security Engineer Location:         St. Paul, MN Position ID:-   RFO0111 Client:               Minnesota Department of Health, MN Kindly Fill given below Skill Matrix With Experience in years:- Also Need 3 professional references with Name, Title, Client, Phone, Email. Minimum Qualifications Required minimum qualifications Minimum Number Years of experience 4 years’ experience working on IT security controls projects in environments that use the following technologies: Oracle, MS-SQL, Active Directory, Java, Javascript, Linux, Windows server 2012, Windows 7, TCPIP. 3 years’ experience working with NIST recommended Security Controls for Federal Information Systems and Organizations, Special Publication 800-53 revision 4. 2 years’ experience with Identity and Access Management (IAM) system(s). Desired Skills Minimum Number Years of experience Experience with Keycloak identity management authentication server. Experience with ArcSight event manager. Experience with RSA Archer platform. At least one engagement in which the applicants had to participate in a SSAE16 SOC 2 or equivalent (e.g. FedRAMP) industry security standards audit Project Deliverables: Detailed project work plan with prioritized deliverables, level of effort in hours, dates, and task assignments. Access Controls Risk Assessment document for Applications, Network, Operating Systems, and Databases based on compliance with MN.IT Enterprise Security Control Standards and data classification for each system. Documented application access controls, procedures, remediation plans, and exceptions that adhere to the MN.IT Enterprise Security Control Standards. Documented network access controls, procedures, remediation plans, and exceptions that adhere to the MN.IT Enterprise Security Control Standards. Documented operating system access controls, procedures, remediation plans, and exceptions that adhere to the MN.IT Enterprise Security Control Standards. Documented database access controls, procedures, remediation plans, and exceptions that adhere to the MN.IT Enterprise Security Control Standards. The documented access controls and procedures must adhere to the appropriate data classifications that are documented in the MN.IT Enterprise Security Control Standards. Documented procedures must include how access is/or will be monitored and tracked. Documented procedures must include any tools that are/or will be used to monitor and track access. Documented application controls and procedures must include remediation for migrating to Keycloak Authentication Server if applicable. Create an MDH Access Control documentation package that can be used to test and verify application, network, operating system, and database access controls that adhere to MN.IT Enterprise Security Control Standards.

Uncategorized

DISA has released the following IAVM packages

DISA has released the following IAVM packages DISA has released the following IAVM packages: http://iase.disa.mil/stigs/Pages/iavm.aspx AIX 6.1 Ver 1, Rel 18 Apple OS 10.10 Workstation Ver 1, Rel 7 Apple OS 10.8 Workstation Ver 1, Rel 11 Apple OS 10.9 Workstation Ver 1, Rel 8 BlackBerry 10 OS Ver 1, Rel 9 Cisco IOS Ver 1, Rel 9 HP-UX 11.31 Ver 1, Rel 18 MAC OS X 10.6 Ver 1, Rel 18 Oracle Linux 5 Ver 1, Rel 11 Oracle Linux 6 Ver 1, Rel 11 RHEL 5 Ver 1, Rel 18 RHEL 6 Ver 1, Rel 16 Solaris 10 SPARC Ver 1, Rel 18 Solaris 10 x86 Ver 1, Rel 18 Solaris 11 SPARC Ver 1, Rel 11 Solaris 11 x86 Ver 1, Rel 11 Windows 7 Ver 1, Rel 16 Windows 8 and 8-1 Ver 1, Rel 16 Windows 2008 R2 Ver 1, Rel 16 Windows 2008 Ver 1, Rel 16 Windows 10 Ver 1, Rel 2 Windows 2012 and 2012 R2 Ver 1, Rel 14 Windows Vista Ver 1, Rel 16 zOS Ver 6, Rel 24

Scroll to Top