Manager Systems Security

Job Description

Work with MTBC’s Information Security Team to implement recommended security practices on network and cloud infrastructure to remove the reported vulnerabilities.

Work with MTBC’s Information Security Team to perform comprehensive risk assessments across network infrastructure and plan/implement remediation.

Work with MTBC’s Information Security Team to ensure compliance with the security standards like ISO27001, ISO9001, PCI-DSS, HIPAA/Hi-Tech security/regulatory requirements.

Implement and monitor security measures for the protection of computer systems, networks and information

Develop technical solutions and new security tools to help mitigate security vulnerabilities

Manage security products like Anti-virus, WAFs, Network Firewalls, HIDS/NIDS etc.

Regularly perform security checks and troubleshooting

Identify problems in a timely manner

Suggest and implement solutions for improvement

Stay up to date with latest security technology and trends

Requirements:

Proven work experience as a Systems Administrator / Systems Engineer / Systems Security Engineer or Similar role.

Experience in building and maintaining security systems

Detailed technical knowledge of database and operating system security.

Hands on experience on DNS, DHCP, Windows and Linux Server environments.

Hands on experience in cloud security systems, firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.

Experience with network security and networking technologies and with system, security, and network monitoring tools

Thorough understanding of the latest security principles, techniques, and protocols

Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols

Knowledge and experience with HTTP and HTTPS on windows and Linux servers as well as their underlying implementations

Tools / Skills

Vulnerability analysis and fixation.

Penetration testing, Intrusion detection

Security information and event management

Cybersecurity: HTTPS, SSL, and TLS

Endpoint Threat Detection & Data Loss Prevention (DLP)

Endpoint / server and data encryption.

Strong analytical and diagnostic skills.

A current understanding of common web vulnerabilities.