3 Quality Control jobs

Our client, a leading U.S. energy company, seeks an experienced cyber security professional to join our Technology Security organization. The primary role will be focused on a new sector-wide program to address national-level risk, primarily focused on but not limited to cyber risk. (S)he will coordinate across critical infrastructure sectors, including the communications sector, financial services sector, and the energy sector; the three main components of the Tri-Sector Executive Working Group. In addition, the role will work across our client's functions to enable key cyber policy objectives.   This role is part of a strategic effort to expand public-private sector stakeholders to mitigate cyber threats to our energy infrastructure. Acting as coordinator and liaison between the company and an analysis and resilience center, the individual in this position will leverage his/her subject matter expertise to ensure the pace, substance, and outcomes of each effort are meeting the objectives of the overall program. The candidate will work to assess, mitigate and respond to systemic risk facing our client and the subsector at large.   The selected individual will leverage his/her experience in cyber security and understanding of US Government agencies (authorities, missions, capabilities, strengths) to plan or execute actions in line with the overall vision that strengthens national security and better secures our client. The person will engage on a variety of cyber-related topics across various business units, including our client's Technology Security, Strategic Security Policy Director, our client’s Government Affairs office, and others. S(he) will analyze actions, gaps, outstanding risks, and other programmatic needs for each of the individual initiatives within the overall effort, with the goal of advancing complex interrelated projects across a diverse set of stakeholders.  MAJOR JOB RESPONSIBILITIES:   Execute assigned aspects the company’s analysis and resilience center and tri-sector engagement, taking a collaborative approach to risk management through prioritization, planning, and response. Work with management to plan, execute, and oversee projects and engagements that further various initiatives Successfully represent our client, including policies and opinions, to outside organizations, potentially including engagements with high-level officials and senior executives. Drive the overall community (both public and private) though innovation and out-of-the-box ideas to better secure critical infrastructure – be a thought leader in this space Coordinate, engage, and collaborate with similar functions at peer utilities Monitor and report on the result of agreements and actions across multiple government agency stakeholders and internal company organizations for areas of responsibility Track, review, and report progress of each effort against plans Assess the risks to each project and advise on potential solutions to technical or policy roadblocks Assist in the implementation of innovative processes, strategies, technologies, and operations for public-private partnership Manage communication plans and patterns with government stakeholders regarding cyber threats, incidents, sector-specific issues, and other engagements Travel is expected to be around 20%, but will vary on individual preferences, current goals, training goals, and operational tempo Must have or be able to obtain a Top Secret US Government Clearance.   Required Knowledge, Skills, Abilities, Experience and Education: BA/BS in computer science, technology, engineering, cyber policy, or other security-related field or equivalent experience Minimum of seven (7) years of relevant professional security experience, or five (5) years with Master’s degree Experience across the US Government and ideally the US Intelligence Community, understanding risk analysis, collection requirements, and analysis Subject matter expertise working on cyber (or similar) security issues jointly with the federal government Understanding of current threats facing the electric and natural gas sectors, either on a technical and/or a policy level Knowledge of Operational Security (OpSec) principles for cyber operations, information sharing, and information protection Strong interpersonal skills and experience working with government staff, both military and civilian Ability to collaborate effectively with all levels of personnel, executives, stakeholders, and government contractors Demonstrated ability to lead others through influence Excellent attention to detail, verbal/written communication skills, and strong organization and time management skills, as well as the ability to effectively manage multiple tasks simultaneously under general supervision Demonstrated ability to achieve timely project execution Independent thinker with strong analytical and problem-solving skills Experience communicating with senior stakeholders inside and outside the company  Preferred Knowledge, Skills, Abilities, Experience and Education: Existing professional network with federal government partners Understanding of various federal legal authorities under which key agencies operate Knowledge of regulatory and policy environment as it applies to electricity and natural gas generation, transmission, and distribution Familiarity with global cyber threats to the energy sector and financial services sector. Relevant professional certifications (PMP, CISM or CISSP) Masters or higher, ideally in a cyber security-related field

Description The Network Security Engineer position will be responsible for network security engineering for configuration, deployment and management of Network Access Control (NAC) systems in a 24 x 7 x 365environment. The analyst must be able to analyze, troubleshoot and remediate issues in a timely manner. The analyst must be goal-oriented, customer focused and able to apply technical solutions to business requirements to assist the organization in achieving business, technical and security goals.  Responsibilities and Duties Include: Develop and enforce authorized network/device policies based on corporate security standards Coordinate with security and networking groups to implement use cases (including custom scripts) Monitor infrastructure to ensure solution is integrated with new network devices or changes Coordinate troubleshooting, break-fix and new feature integration Manage, monitor and upgrade software and hardware Create periodic customer reports and dashboards as needed Maximize and maintain integrations (NGFW, SIEM, CMBD, etc…) Manage role-based administration and user accounts Qualifications 3+ years of design/implementation with networking experience Deep knowledge and experience with NAC configuration and implementation (ForeScout CounterACT, FortiNAC, etc.) Experience with one or more network vendors: Cisco, Apcon, Ixia, InfoBlox or GigaMon Experience with one or more major security vendors: Cisco, ForeScout, Palo Alto, CyberArk or Splunk Experience with troubleshooting application connectivity and performance through log analysis and network captures Ability to clearly document technical steps and procedures Working knowledge of python, shell, perl and xml scripting a plus Excellent communications skills, strong customer orientation, good organizational skills, self-driven with ability to multi-task on various projects and aptitude to learn new technologies Education/Certification Bachelor’s Degree in computer science, Engineering or equivalent industry experience Industry Certifications such as CISSP, CASP, Security+, CEH, SANS (GCIA, GCIH, GREM, GPEN) is a plus ForeScout Certified Administrator (FSCA), ForeScout Certified Engineer (FSCE) a plus Location Atlanta / Birmingham

Position Overview  This role will serve as a key stakeholder in designing and implementing the identity security strategy across multiple aspects of our client’s technology footprint.  While the focus of this role will be cloud identity, a successful strategy must leverage significant input from resources and systems in our client's established on-premises identity structure.  The candidate will be required to identify security gaps, craft plans to close those gaps, and work with business partners for buy-in and rollout execution.  The cloud properties in scope include multiple public IaaS/PaaS providers as well as numerous SaaS applications.  This is an important role that will help shape and mature the identity strategy across the company. The candidate will be responsible for building and integrating secure identity methodologies into existing cloud projects, as well as establishing documented guidelines for new applications – both internally developed and off the shelf.  This role is well suited to a security focused, forward leaning individual who solves problems with a risk-based approach.  Qualifications Bachelor’s degree or equivalent experience Minimum of three years’ experience with one or more of the following areas: network security, application security, endpoint security, system administration, identity and access management, data security, incident response or penetration testing Operational experience with public cloud infrastructure providers (AWS, Azure or Google Cloud) is preferred A thorough understanding of SAML authentication and experience integrating applications with common identity providers Experience integrating with a SIEM or other security monitoring environment is preferred Broad knowledge of core information security principles (e.g. access control, least privilege, data integrity) and security capabilities Experience in evaluating, recommending, and implementing new and emerging security products and technologies Excellent verbal and written communication skills Strong understanding of Linux and Windows operating systems and controls Experience with Active Directory required Experience with cloud identity providers (Azure AD, Okta, Ping etc) preferred Experience with DevOps and Agile methodologies preferred Job Responsibilities     Design and implement cloud identity security controls for Technology Organization in both IaaS/PaaS and SaaS environments Apply advanced knowledge and functional experience with authentication and authorization mechanisms to modernize and secure our client's identity strategy Assess existing cloud implementations, identifying identity security issues and prioritizing fixes Work with engineering and operations teams to implement identity threat detection signals, deploy new tooling and improve response capabilities both in cloud and on-prem environments Help refine identity security methodologies in cloud DevSecOps processes Provide subject matter expertise in support of overall migration to public and hybrid cloud service architecture Create architecture solution roadmaps for linking SSO and Federated services with internal business processes and technologies Engage and empower Technology Organization personnel and other business units to understand and apply information security concepts to mitigate corporate risk Provide expertise in workflow, policy and external integration with Privileged Identity Management tools Plan, coordinate and provide subject matter leadership on information security projects Help customers understand and apply identity security concepts, processes, and technologies Demonstrate company values of Safety First, Unquestionable Trust, Superior Performance, and Total Commitment  Job Requirements       United States citizenship is required Consulting experience; ability to understand business requirements and present appropriate solutions Ability to work independently or within a team Demonstrated critical, independent thinking; demonstrated ability to conceive and present creative solutions Must pass NERC CIP & Insider Threat Protection background checks Occasional travel to local and regional locations in pursuit of the job duties and requirements. Our  LARGE COMPANY CONFIDENTIAL CLIENT   is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.