Fiserv Information Security Engineer, Sr in Alpharetta, Georgia

Position Description

What does a great Senior Information Security Engineer do for Fiserv?

The Senior Information Security Engineer for the PCI Service Delivery team will focus on classifying, prioritizing, validating and assigning patching and remediation work required to meet regulatory, industry and/or contractual compliance guidelines which include PCI, GLBA, FFIEC, SSAE16 and Corporate Policy and Procedures. This data triage work includes the in depth analysis and validation security testing of vulnerability scan data and working with multiple technical teams within Fiserv to resolve identified risk items through re-configuration, vendor patches, security updates or mitigating controls. You’ll have a well-rounded technology background as you will be investigating and resolving risk items with network devices (proxies, load balancers), operating systems (Windows, Linux), Active Directory group policy management, VMWare ESX management and patching and other platforms as needed (Databases, midrange/mainframe, AIX, Solaris). You’ll provide custom vulnerability scanning and analysis and segmentation testing to be done prior to PSC coming onsite for their annual PCI assessment penetration testing.

As a Senior Information Security Engineer, you can look forward to:

  • Providing guidance and direction to staff on technical issues/concerns

  • Assist in 3rd party penetration testing and remediation to ensure timely resolution of gaps/findings.

  • Define alternate solutions, mitigations or workarounds for technical findings for internal and external penetration testing. Perform limited manual vulnerability analyst testing and/or validation of vulnerabilities

  • Provide technical vulnerability expertise and support for Fiserv platform teams.

  • Participate in regular vulnerability analysis meetings and produce ongoing reports of progress.

  • Validate Exceptions Request and assist in determining False Positives defined by business unit SME’s.

  • Assist in developing and testing out new solutions to effectively track and remediate vulnerabilities.

  • Provide six month segmentation testing for over 50 Fiserv business units.

  • Provide Pre 3rd party penetration testing for our business units Provide IPT/EPT

  • Remediation testing prior to 3rd party provider performing re-test activities

  • Provide guidance and direction to the team in participation of all Fiserv Internal and External penetration testing. Technical Testing and Validation of ETG Service offerings.

Basic qualifications for consideration:

  • Bachelors in Computer Science, Information Technology, Information Assurance or high school diploma with 3 years equivalent experience

  • Minimum of 2 years of systems and network security experience

  • Minimum of 2 years of application/device security experience

Preferred Qualifications for Consideration:

  • Penetration testing experience

  • Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography

  • Experience with application of threat modeling and other risk identification techniques

  • Hands on and Detailed knowledge of risk assessments, threat modeling and fixing vulnerabilities

  • Detailed knowledge of the TCP/IP stack and its related protocols; TCP/IP, UDP, IPSEC, HTTP/HTTPS, routing protocols

  • Excellent written and verbal communications skills

  • Results oriented, self-motivated

  • Ability to support an extensive client base in varied geographical locations.

Certifications:

  • CISSP, OSCP, GPEN, CISM and/or CEH, GSEC, Security+

About us:

Find Your Forward at Fiserv, a FORTUNE™ 500 company, and join the industry leader in financial services technology. With more than 23,000 associates around the world, we're pushing the boundaries of what's possible with deep expertise and a commitment to innovation.

At Fiserv, you'll find a collaborative environment that values teamwork and open-mindedness. Our unique combination of expertise and innovative spirit helps us deliver the most comprehensive financial solutions to banks and businesses worldwide. We're helping more businesses move money faster and more easily than ever before. Explore the possibilities of a career with Fiserv and Find Your Forward with us.

Travel Required:

  • Up to 25% as needed

Fiserv is an Equal Opportunity Employer/Disability/Vet.

Fiserv is an Equal Opportunity Employer/Disability/Vet. Visit http://www.careers.fiserv.com/eeo for more information.