Security Analyst IV (Application Security Architect) - Andrew Wireless Solutions
Aug 20
Location: Joliet, ILCategories: IT
Website: http://www.commscope.com
Position Description
Andrew Wireless Solutions, a CommScope Company, is the foremost supplier of one-stop, end-to-end radio frequency (RF) solutions. Our Antenna, Cable, and Cabinet Group and Wireless Network Solutions Group combine to design, manufacture and deliver complete solutions for wireless infrastructure-from top-of-the-tower base station antennas to cable systems and cabinets, RF site solutions, signal distribution, and network optimization. For more information, please visit www.CommScope.com Active Directory and Microsoft Operating Systems (95, NT, 2000, XP, 2003)
SUMMARY:
Designs, develops and administers technical security systems and processes to protect the integrity, confidentiality and availability of CommScope’s information resources. Participates in security planning/risk assessment and provides input on the selection of methods used to ensure the protection of the Company’s systems and data.
EDUCATION/EXPERIENCE: Bachelor’s degree (BA. or BS.) in related fields from a four-year college or university with 8+ years of work experience most of which is in Information Technology Security or related fields. Experience with security-related hardware, software, external interfaces, commercial security products, and security architecture/design practices including server, network, database, and application hardening. Experience with securing software development methodologies, object-oriented design, design-patterns usage, and database design. Certification for the Information Systems Security Professional (CISSP) or Global Information Assurance Certification (GIAC) is a plus.
TECHNOLOGIES: Must have broad and practical knowledge of systems for complex business environment functioning across business disciplines. A few examples of technical disciplines are:
- LINUX
- HP-UX-11.0 or higher
- Solaris 7.0 or higher
- Protocols (HTTP, SOAP, JDBC, LDAP)
- Databases (SQL Server, Oracle, MySQL)
- Other application vulnerability management tools
ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned.
- Provides policies, standards and best practices for enterprise wide Application Security Architecture based on industry standards & best practices. Defines the security architecture ensuring it meets business requirements and regulatory security standards.
- Serve as Application/Database security consultant on cross-functional project teams in the evaluation and selection of enterprise developed/ packaged applications and vendors, satisfying business requirements and security compliance. Serve as a key contributor during the implementation phase.
- Identifies security risks and exposures by conducting application security audits, database security evaluations and risk assessments. Investigate application security vulnerabilities and maintain accurate records for management review. Proactively monitor Information Security forums, newsgroups, websites, and other publications for latest relevant information. Interface with business owners to classify information assets to support the corporate IT risk management practices.
COMMUNICATION SKILLS: Be able to express ideas effectively in individual and group situations both written and orally. Adjusting language or terminology to the characteristics and needs of the audience.
INITIATIVE: Make active attempts to influence events to achieve goals; self-starting rather than accepting passively; taking action to achieve goals beyond what is required.
TEAMWORK/COOPERATION: Be able to work effectively with a team or those outside formal line of authority to accomplish organizational goals; taking actions that respect the needs and contributions of others; contributing to and accepting consensus.
CUSTOMER SERVICE ORIENTATION: Make efforts to listen to and understand the customer (both internal and external); anticipate customer needs; give high priority to customer satisfaction.
It is the policy of Andrew Wireless Solutions, a CommScope Company, to provide Equal Employment Opportunities to all individuals based on merit, qualifications and abilities. Andrew Wireless Solutions does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age disability, or any other characteristics as protected by law.
