Cette offre d'emploi n'est plus disponible
À propos
Working with Hitachi Vantara engineering teams and customers to ensure products meet US Government security requirements Evaluating the posture and compliance of security offerings based on internal/external criteria and perform gap analysis Hardening Hitachi Vantara product and service offerings Assisting in achieving and maintaining ATOs for both traditional and Fedramp based solutions Drafting, reviewing, and maintaining System Security Plans (SSPs), Contingency Plans, and Plans of Action and Milestones (POA&Ms) Providing security guidance and defining requirements for Hitachi Vantara’s internal systems, customer-facing services, and products Identifying security design gaps in existing and proposed product and service architectures and recommending changes or enhancements Requirements:
Minimum 8 years of security architecture and/or engineering experience Advanced technical capabilities in platforms and systems (Linux, Windows, VMWare, SQL, etc.) Familiar with industry and government security standards and baselines such as DISA STIGs, CIS benchmarks, NIST 800-53, NIST Risk Management Framework, FIPS 140-2/3, NIST Cybersecurity Framework and NIST 800-171 Experience with Fedramp approval process and securing solutions in public and private clouds (AWS, Azure, GCP) Strong understanding of application security patterns including web application security (OWASP top 10, XSS, injection vulnerabilities, CSRF, platform security hardening) and mobile security strategies (device fingerprinting, mobile authentication and key exchange) Familiar with IAM federated identity strategies - SAML, OAuth, and OIDC protocols Strong/expert level understanding of trends in information security policy, audit, compliance, and risk management Certifications Desired: CISSP, CSA, Security+ Benefits:
Health insurance Flexible work arrangements Paid time off Professional development opportunities
Compétences linguistiques
- English
Avis aux utilisateurs
Cette offre a été publiée par l’un de nos partenaires. Vous pouvez consulter l’offre originale ici.