Desired Skills and Experience

  • 4+ years in offensive security (penetration testing/vulnerability scanning)
  • 4+ years of Threat Management and cyber threat intelligence
  • Firewall management and operations
  • Network operations or security engineering
  • System administration on Unix, Linux, or Windows
  • Advanced cyber threat intelligence
  • Scripting and automation
  • Knowledge of Payment Card Industry (PCI) Data Security Standards. Experience with a Qualified Security Assessor in conducting and or evaluating PCI certifications is optimal.
  • Understanding in, or working within one or more regulatory areas including, but not limited to ISO 17799 and/or 27001, GLBA, HIPPA, FISMA, FedRAMP, etc.
  • Knowledge and working understanding of security technology such as Firewalls, IDS/IPS Systems, vulnerability management systems, enterprise level network architecture, perimeter protection strategies, security policy structure, penetration testing, and application development methodologies
  • Demonstrates a solid understanding of vulnerability management solutions from a strategic architecture perspective and how VM solutions operate effectively in a global distributed enterprise
  • Able to interpret architectural, dataflow and technical diagrams
  • Able to create and recommend remediation for components of information security policies, processes and procedures. Provide specific recommendations for a client’s business and/or technical issues
  • Knowledgeable of information security programs, security policy creation and review
  • Able to complete a security risk assessment on various technology implementations
  • Ability to create detailed, professional documentation to be delivered to clients and/or management
  • Excellent verbal and written skills and must be able to communicate effectively with a variety of clients with varying degrees of technical expertise
  • Good presentation skills for presenting security information and for discussions with auditors, assessors, and clients.
  • Self-starter with the ability to perform tasks with little or no supervision
  • Position may entail some travel in order to be present during on-site security reviews (i.e. other Experian locations).
  • Knowledge of vulnerability scanning and management in cloud specifically Qualys cloud agent management in AWS and Azure.
  • Bachelor’s degree in a Computer Science, related technical discipline or equivalent experience.
  • Minimum of 6 years related experience with security in operating systems, firewalls or networks
  • One or more technical certification such as CEH, CISSP, CISM are also optimal

Apply