长沙招聘

Responsibilities

1.Working within the GIS security team assist in expanding the functional capability including Threat & Vulnerability Management(TVM) , scanning of JCI network connected devices worldwide and integration of TVM related metric reporting

2.Periodically review firewall rules and provide suggestions in optimizing firewall policy and strategy.

3.Conduct vulnerability scans on a regular basis, communicate results to the GIS internal team.

4.Perform manual audit/assessment in various areas, and communicate risks to the GIS internal team .

5.Analyze raw logs from Anti-virus systems, correlate metrics with security best practices and report to the GIS internal team.

6.Engaged in gathering evidence to be used in review of security incidents.

7.Work closely within GIS team to manage security/risk controls.

8.Conduct security research in keeping abreast of latest security issues.



Position Skills and Knowledge Required

1.Broad knowledge of networking, routing protocols, switching, firewalls, Extranet and DMZ security and remote access methodologies.

2.Experiences in build or maintain (or harden) MS Server, Linux, Unix or Solaris based operating system.

3.Experience on firewall assessments, rules base reviews, security control and assessments.

4.Experience with enterprise anti-virus management products including design, reports and analysis.

5.Solid understanding of factors that influence applications (web app etc) security. Familiarity with related industry standards and technical best practices. An understanding of the OWASP framework is preferred.

6.Hands on experience using vulnerability assessment, network scanning and DLP tools such as Qualys, Appscan, IPSonar, Vontu, etc is preferred.



Key Competencies

1.Bachelor's degree in computer science or related field is required.

2.Must have 3-5 years of IT related experiences.

3.Solid technical understanding of information technology and certain level understanding of information security best practices.

4.Good analytical skills and the ability to multi-task.

5.Able to work independently and in a team environment.

6.Good oral and written communication skills (English) with the ability to present (at all levels, including management and senior leadership) and discuss technical information in a way that establishes rapport, persuades others, and gains understanding.

7.One or more certifications in following areas: Networking & Firewalling, Operating Systems, Web Application, Database, etc.

8.Experience with the following standards and frameworks, a plus: ISO 27001, ITIL, COBIT, SDLC, OWASP.

9.One or more, current Information Security related certifications CISSP, CISP, CISA, CISM, GIAC, CEH, etc is a plus.

北京护航科技有限公司是联想控股集团旗下专注致力于提供it运营外包服务的专业服务提供商，公司前身为联想it服务部，可提供从高端的itsm/itil咨询实施、系统集成到it基础架构运营外包的全价值链服务。旨在为中国企业和机构引入最先进的管理理念和业务流程，为客户提供以流程为导向、以客户满意和服务品质为核心的it服务，帮助客户提高管理水平和运作效率，让既有的信息化资源发挥更大的效能，持续增强核心竞争力。

联想it外包服务业务从2002年服务于联想集团起步，于2003年正式对外服务，在短短的2年中获得了20多个客户的认可，其中大部分是世界财富500强企业，并快速地形成了在中国各主要城市的服务网络布局。为企业和机构提供从it基础架构、客户端支持、后台系统管理到专项项目和咨询等全方位运营解决方案，成为企业和机构在中国成长的重要的it运营合作伙伴。2005年，我们it运营外包服务荣膺国家商务部组织评选的“杰出it外包服务贡献奖”。

护航科技拥有遍布全国的服务网络和庞大的可调配服务资源，可以按照客户的需求进行最优化的资源配置。丰富的服务经验、先进的it服务管理理念以及全面的技术储备使我们能为客户提供以业界***管理实践为基础的、高质量、专业的it管理服务。

护航科技秉承联想深厚的本土经验，倡导诚信的经营理念，以国际化的专业视野做专业的 it外包服务，致力成为中国领先的专业、可信赖的it服务提供商。