Job Summary: The Mainframe Security Expert will be responsible for the tactical execution of various vulnerability management projects, with a strong focus on data analytics, asset modeling, and security. This role will include guiding projects related to mainframe security, providing expertise in Mainframe Security Systems (ACF2, TSS, and RACF), and assisting with the use of our home-grown vulnerability tool and other utility tools. The individual will also serve as a subject matter expert for z/OS hardening and security controls.
Key Responsibilities: - Provide day-to-day tactical execution of the project, including detailed analytics of various data points.
- Guide projects related to asset modeling and make project documentation entries as required.
- Act as the main point of contact for Client staff regarding training and daily questions about the home-grown Vulnerability tool and other utility tools for managing vulnerabilities.
- Serve as a subject matter expert in Mainframe Security Systems, specifically ACF2, TSS, and RACF, as part of vulnerability management projects.
- Determine security standards for z/OS hardening, security controls, and vulnerability remediation.
- Facilitate communication between mainframe engineering teams and information security teams.
- Provide expertise in zSecure Audit and the implementation of security controls.
Required Qualifications: - 7-10 years of experience in zSecure Audit.
- Strong knowledge of z/OS RACF STIG and experience using it in hardening efforts.
- Must be proficient in Mainframe REXX, IBM SYNC SORT, and ICETOOL.
- Excellent communication and documentation skills.
- BS Degree in a relevant field or 15+ years of Mainframe Security experience.
Preferred Qualifications: - Experience with z/OS security consulting and penetration testing.
- Familiarity with security consulting practices and vulnerability remediation.
Certifications (if any): [Insert any relevant certifications, such as CISSP, CISM, etc.] Primary Skills: - Mainframe REXX
- IBM SYNC SORT
- ICETOOL
- zSecure Audit (7-10 years experience)
- z/OS RACF STIG hardening
- z/OS security consulting / penetration testing
- Strong communication and documentation skills
Education: Bachelors Degree