ICT Security Specialist

Main Role

The ICT Security Specialist is responsible for operating IT security systems such as firewalls and IDS, performing security assessments and recommending mitigating actions, investigating security incidents, creating and distributing reports, and promoting security awareness.

Essential Responsibilities and Duties

• Project, configure, implement, and maintain all security platforms and any other related software, such as anti-virus, routers, Anti-SPAM, switches, intrusion detection or intrusion prevention, firewalls, cryptography systems, SIEM, and MDM
• Plan and appraise ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies
• Guarantee network security best practices are executed through auditing: router, change control, switch, firewall configurations, and monitoring
• Responsible for periodic vulnerability testing, and lead remediation actions.
• Articulate systems and methodologies as well as reply to security-related events and support in remediation efforts.
• Coordinate and oversee log analysis for organization managed services offerings to ensure policy and security requirements are met.
• Maintain network security devices to enable pro-active defence of networks within a managed service Security Operation Centre (SOC) environment.
• Work under the direction of the ICT Director to maintain security devices and show practical experience in managing SIEM environments, firewalls, content filters, NIDS, proxy servers, HIPS, and packet capture devices
• Work with employees to form and fix appropriate policy and signature rules. This comprises tuning and development of the creation of custom intrusion detection and SIEM signatures and rules, including the efficient on-boarding and understanding of varying customer log sources into SIEM environments
• Work in collaboration with appropriate stakeholders to ensure LRC employees have devices that are fully operational and secure.
• Lead in the establishment and maintenance of a register of data owners for sets of information (e.g. paper files, databases) assessing and educating/training the data owners on their responsibilities (what is the data, how is it used, who has access to it).
•  Work under strict change control processes to ensure only authorized changes are made to devices.

Function Specific Experience

• Strong knowledge of Intrusion Detection/Prevention Systems and monitoring tools support and administration.
• Working knowledge of at least one high-level scripting/programming language, and skill in the design, writing, testing and debugging of computer programs or (PERL, PHP, Python, Java, C/C++).
• Proven Unix system administration skills in the Solaris or Linux environments.
• Proven skills managing TCP/IP-based networking, Network Admission Control systems, and using common network troubleshooting tools and techniques.
• Knowledge and understanding of wireless networking.
• Strong planning, organization and time management skills with the ability to handle multiple projects without direct supervision.

Years of Experience

• 3 years’ experience in administrating Unix/Linux system and monitoring/administrating Intrusion Detection/Prevention Systems.