01/12/2008

This technologist must be a quick study of new technology and be able to analyze the security components of complex multi-layered computer systems (applications layer, middleware layer, and infrastructure layer). This technologist must have an understanding of technical and process security controls and their appropriate incorporation into business systems. Strong impact and influence skills are required. A focus on teamwork and the ability to escalate unresolved issues to management in both technical and non-technical terms is required.

• Provide 24X7 technical security support for technologies.
• Facilitate the authorship and maintenance of security technology configurations and standards.
• Create system-level security architecture and design which includes definition of technical security controls (e.g., access control, authentication, encryption, deterrence measure, etc) and definition of non-technical security controls (e.g., process and procedure) necessary to achieve the security requirements and remediate audit finding.
• Execute a cost/benefit analysis for various security design elements. This will enable the business owner to evaluate various cost/benefit trade-offs.
• Test detailed security configuration to ensure it complies with technical standards and meets system performance and production load requirements.