Information Security Senior (Database Security)

Employer
Freddie Mac
Location
Reston, VA
Posted
Jul 26, 2017
Closes
Aug 25, 2017
Ref
7208BR
Hours
Full Time
Position Overview
Information Security Operations supports several enterprise tools and systems that are backbone for many of the critical applications and business processes. Information Security Operations team ensures and enhances the availability, reliability and accessibility of Information systems and tools through a cost effective standardized support model. We demonstrate Freddie Mac’s Information Technology (IT) department’s vision and alignment to the business objectives and strategy, present IT’s identity within the business model, execute IT’s vision through the established technology roadmap and partner in setting the strategic direction for vendor management and product roadmaps. Responsibilities include:
*Support monitoring & encryption systems and provide tool administration support
*Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups
*Apply patches and upgrades on a regular basis, and upgrade administrative tools and utilities
*Configure new and maintain existing services as necessary
*Establish and maintain operational, configuration and other process/procedures to ensure effectiveness of new and existing detective and preventative configuration policies
*Coordinate with other infrastructure, engineering and application project/support teams to ensure new policies/assets are deployed and issues impacting tools and systems are resolved quickly and effectively without adversely impacting the affected business systems
*Install, configure, troubleshoot and support Database Security monitoring tools such as IBM Guardium, Imperva SecureSphere Database Security solutions, and Trustwave DbProtect
*Draft and maintain technical installation, configuration and customization specification documents
*Support planning, coordination and execution of system changes per established enterprise change process
*Augment production support team to ensure 24/7 coverage and operations. Responsibilities sometimes require working evenings and weekends, sometimes with little advanced notice

Basic Requirements
*Bachelors (4-year) degree, with a technical major, such as engineering or computer science
*5-7 years of professional IT experience, with at least 3 years of information security experience
*Experience with Security products in a seasoned professional or senior role including experience with policy configuration, application integration and software deployment
*Experience with administrating, implementing and supporting enterprise Database Security solutions.
*Experience with developing and deploying connectors
*Must have a good working knowledge of Unix commands, shell scripting (Unix, PowerShell, Python, etc.) and SQL
*Ability to think critically to troubleshoot ability to fix identified system issues/failures, identify root cause and fix issues on a timely basis while maintaining the availability and integrity of the system
*Experience implementing and/or maintaining Database Activity Monitoring (DAM), Vulnerability Management (VM), Baseline Security Compliance Monitoring and Data Discovery policies and processes
*Knowledge and understanding of Unix commands, and other scripting languages

Preferred Skills
*Experience with additional web application, network, desktop endpoint and server monitoring, log management (aggregation/correlation), public key infrastructure (PKI) and encryption Security solutions
*Understanding of server/file encryption technology, encryption key management and information security policy
*Advanced technical proficiency with Windows and Linux Server support and Systems Administration
*Advanced knowledge of security concepts such as data loss prevention (DLP), web application firewall, infrastructure and web application vulnerability assessments, baseline hardening standards (CIS, DISA, etc.), endpoint protection is desirable
*Experience with Unix, Windows, Database administration a plus
*Splunk administration experience a plus
*CISSP or Security+ certification a plus
*Exceptional organizational skills with an ability to manage multiple priorities in a fast-paced dynamic environment
*Proven written and verbal communication skills with both Business/Management and Technical/Engineering resources

Closing Statement
Today, Freddie Mac makes home possible for one in four home borrowers and is one of the largest sources of financing for multifamily housing. Join our smart, creative and dedicated team and you’ll do important work for the housing finance system and make a difference in the lives of others. Freddie Mac is an equal opportunity and top diversity employer. EOE, M/F/D/V.