Cyber Security Specialist (F5 Load Balancer)

Company: CareFirst
Location: Washington
Posted on: July 1, 2020

Job Description:

Resp Qualifications PRINCIPAL ACCOUNTABILITIES Under the supervision of the Manager, Information Security or Senior Lead Cyber Security Specialists, the incumbentrsquos accountabilities include, but are not limited to the following 1. Maintain the F5 security tool for load balancing and application security. Configure and customize the Application Security Manager (ASM) and Local Traffic Manager (LTM) F5 tools toprevent all secruity threatsin an ever changing environment. Integrate F5 with other tools to provide automated monitoring and alerting on system health. Plan and design the future roadmap of the F5 tool, and perform periodic system upgrades to the F5. bull Support and deploy systems, information security applications and hardware, and infrastructure components to protect the security of CareFirst information. bull Provide appropriate training to other security specialists and external customers on developed standards, procedures and guidelines. bull Implement necessary enhancementsupdatesupgrades to existing security products. bull Assist in the configuration and installation of security products. Where possible, suggesting and implementing possibilities to automate manual operational activities. bull Represent Information Security in disaster recovery procedures and exercises. bull Test and report on new technologies and reporting security concerns through the creation of security vulnerability assessments. bull Review and approve ACL firewall change requests. Perform periodic compliance reviews of firewall configurations. bull Design, implement, and integrate security solutions to address enterprise risks and exposures. bull Design and implement security solutions to monitor the efficiency and effectiveness of security operations, controls and infrastructure. 2. Apply technology and processes to ensure the enterprise is protected and secured in the following areas bull Identity and access management bull Provide data protection (through the use of technologies such as whole disk encryption, end-to-end e-mail security, public and private key management, data leakage prevention, web applications and source code security, database security, etc.) bull Network devices and infrastructure, desktopmobile devices and remote access to the network, bull Information governance to ensure data is managed based on its sensitivity. bull Perform day-to-day maintenance and addressing issues and problems associated with security tools. bull Provide general support to the Information Security department in carrying out itsrsquo assigned functions and responsibilities. bull Provide off-hours support and problem resolution as directed by departmental requirements, service level agreements and internal support procedures. bull Interact with other Technical and Operation Support Service teams to develop tactical and strategic programs to address processes, controls, organization and infrastructure to manage information security related concerns and satisfy directives. 3. bull Assist with reviews of current and new CareFirst systems and applications, including changes to existing applicationssystems, to assure compliance with Information Security policies and standards. bull Apply creative thinking in problem solving and identifying opportunities for improvements in security. bull Utilize IDSIPS systems, SIEM (Security Incident and Event Management) tools and network scanners to review, assess, and document incidents and vulnerabilities to improve security. bull Collaborate with other Cyber Security specialists, designers, developers, and architects. bull Work with other technical teams in the organization such as IT Operations and IT Applications. bull Share ideas, discuss alternatives, and seek input. Suggest means to decrease vulnerability of systems, applications and processes. bull Maintain familiarity with state of the art concepts, procedures, software and techniques in Information Security in order to be able to effectively assess and develop the CareFirst Information Security environment. QUALIFICATION REQUIREMENTS Required College Degree in an Information Security or Technology related field or equivalent experience plus 1 to 3 years related work experience. The incumbent will possess a basic aptitude in information security concepts, information security policies and system architecture concepts and have experience in process definition, workflow design, and process mapping. A basic understanding in multiple areas of Information Security such as networking (TCPIP, OSI model, network protocols), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, switches, routers, IPSEC, IDSIPS, etc.), voice technologies (session border controllers, MPLS, VOIP, etc.), authentication technologies, (TACACS, RADIUS, etc.), wireless architectures, encryption key management, and mobile device technologies. The incumbent must also have an ability to quickly and effectively learn Information Security tools in a large, complex multi-platform environment. AbilitiesSkills (candidate will possess some of these) bull Ability to identify and resolve complex issues and develop security solutions to meet CareFirstrsquos business and technology goals. bull Strong written documentation skills and technical writing are required. bull Excellent presentation and verbal communication skills. bull Ability to effectively complete tasks with under some supervision. bull Strong computer skills, including knowledge of Microsoft Windows, various e-mail systems (Lotus Notes, Microsoft Exchange) and unified communication systems (Office Communication Server). bull Possess a high level understanding of some of the following systemsskill sets o IBM Tivoli administration and configuration o System hardening concepts and techniques o Checkpoint technologies o Network and remote access controls o LDAP, Unix, Active Directory, Java, EJB, JSP, JDBC, JMS, Kerboros, PKI, XML, WSDL, Web Services, Ant, and Spring Framework o Unix, Linux, Web application servers (WebSphere, Apache) o Virtualization technologies (VMware, VLANS, Hypervisors) o Encryption technologies and key management o Web application servers o F5 LTMs ASMs o Web application and IP firewalls bull Familiarity with access control methodologies (MAC, DAC. RBAC) Preferred bull Specific knowledge of the CareFirst corporate structure. bull An understanding of the relationships among various units within the corporation. bull Ability to understand and apply appropriate policies and procedures. bull Basic understanding of SIEM tools and system log analysis. bull Knowledge of ethical hacking techniques and counter attack methodologies. bull Familiarity with security tools such as wireless and network scanning applications, vulnerability assessment applications and concepts, IDSIPS and other appropriate security related tools and capabilities. bull Some experience working with Information Security tools in a large, complex, multi-platform environment. Any technical certifications is a plus ndash such as Network+, Security+, A+, CISSP, ITIL, and others LI-CS1 Equal Employment Opportunity CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer. It is the policy of theCompany to provide equal employment opportunities to allqualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. Hire Range Disclaimer Actual salary will be based on relevant job experience and work history. Closing Date Please apply before 6142020 Federal DiscPhysical Demand Note The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes himher ineligible to perform work directly or indirectly on Federal health care programs. PHYSICAL DEMANDS The associate is primarily seated while performing the duties of the position. Occasional walking or standing is required. The hands are regularly used to write, type, key and handle or feel small controls and objects. The associate must frequently talk and hear. Weights up to 25 pounds are occasionally lifted. Federal DiscPhysical Demand Note The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes himher ineligible to perform work directly or indirectly on Federal health care programs. PHYSICAL DEMANDS The associate is primarily seated while performing the duties of the position. Occasional walking or standing is required. The hands are regularly used to write, type, key and handle or feel small controls and objects. The associate must frequently talk and hear. Weights up to 25 pounds are occasionally lifted. Sponsorship in US Must be eligible to work in the U.S. without Sponsorship Sponsorship in US Must be eligible to work in the U.S. without Sponsorship

Keywords: CareFirst, Washington DC , Cyber Security Specialist (F5 Load Balancer), Other , Washington, DC