Make your next career move a success.

Application Security Assurance               (9193945)
The Application Security Assurance is a hands-on, first line role responsible for evaluating and enforcing security across the Secure Software Development Life Cycle (SDLC). The Application Security Engineer will conduct code reviews and assess/remediate issues stemming from application security scans using various tools. The position will work closely with IT Development implementing, executing and improving the security of our developed applications that could lead to negative operational, reputational, and/or financial impact. The ideal candidate will have solid experience operating a risk-based penetration testing program, conducting both manual and automated penetration tests to improve application security and effectively communicating flaws to management as part of risk metrics reporting.
Key Responsibilities:

• Conduct ongoing code reviews and application security scans, identify and interpret flaws, consult and advise development teams on remediation and track issues to resolution in accordance with service level agreements (SLA).
• Proactively manage security flaws and engage IT Development to ensure issues are resolved in line with SLAs.
• Maintain monthly management reporting supporting this effort.
• Perform dynamic/static testing using various tools, provide recommendations and guidance on mitigations and validate issue remediation. Maintain detailed evidence documentation throughout process.
• Review application security and approve application changes as part of formal Change Management process.
• Collaborate with colleagues from Security Architecture & Assurance, Security Operations and IT Development in the testing and remediation process, including resolution of issues stemming from risk assessments and third party penetration testing.
• Participate in the development of security standards, provide recommendations for improving application security program based on subject matter expertise and industry best practices.
• Maintain application security program standard operating procedures in line with applicable our Security standards.
• Contribute to regulatory, risk assessment and internal audit examinations where required.

 
Qualifications

• 5+ years’ experience in application security function working with developers throughout Secure Software Development Life Cycle.
• Ability to identify security vulnerabilities from source code reviews/testing and provide security guidance to development teams.
• Strong knowledge of Open Web Application Security Project (OWASP).
• Strong knowledge of common application security vulnerabilities (e.g., XSS, CSRF, SQL injection, input/output validation, etc.) and how to engineer software to avoid them.
• Expertise in application security testing, static and dynamic analysis.
• Prior Experience in programming in one or more server-side technologies ideal e.g., ASP.NET.
• Experience with manual penetration testing and incorporating with automated methods/tools.
• Familiarity with web application firewalls.
• Critical thinker with demonstrated problem solving skills.
• Demonstrated ability to prioritize and successfully manage competing work assignments in a time sensitive environment.
• A high degree of initiative required with the ability to work independently or as part of a team.
• High level of personal integrity, and the ability to professionally handle confidential matters and project the appropriate level of urgency, judgment and maturity.

 
 
This is a temp to perm position.
The position can be located in any of the following facilities: Pasadena, Livingston, Charlotte, NC, or Jacksonville.

Microsoft Windows is an important technology for our firm. It is our primary desktop operating system and many key core infrastructure services are provided by Windows servers. Members of the Windows team work with others in the broader Systems group to monitor, manage and maintain our mixed environment of Linux and Windows, across a physical and virtual computing landscape on three continents.
 
As a Windows Engineer you will be responsible for the whole Windows infrastructure from Active Directory and DNS to more complex issues in the Windows Desktop environment, all of which is critical for the continuity of the business. Time will be spent improving, automating and standardizing the environment – finding issues and proposing improvements, communicating among the rest of the local team in your region and abroad, planning and executing deployments.
 
We use a variety of platforms and programming languages for developing and maintaining our trading environment. Teamwork is paramount, so you should be excited about sharing your work with others. We enjoy the challenge and diversity encountered on each day. You will get exposure to multiple segments of our business and will work with our trading desks and international offices on a daily basis. Sometimes the work is intense, but it is always rewarding. We seek talented people and provide them with the tools to succeed with a great company.
 
Qualifications:

• 5+ years’ experience and knowledge of inner workings of Microsoft Windows 7/10 and Server 2012 R2/2016
• Advanced working knowledge of Active Directory/DHCP/DNS/Group Policy
• Experience with hardware monitoring and performance tuning
• Advanced/Expert PowerShell
• Troubleshoot, analyze and solve technical issues in a fast-paced environment
• Clear and concise communication skills
• Maintain a high degree of customer service for all support queries
• Clearly document problem resolution using our online knowledge base
• Troubleshoot workstation operating systems, applications, peripherals, network and audio-visual issues

- Perform all server and domain level administrative tasks such as, monitoring and configuring DNS and DHCP, assigning server roles, adding and removing AD accounts and AD security groups, creating and applying Group Policies,  maintaining mailboxes, resetting passwords and accounts, etc.
- Perform planed backups using Veeam and Symantec Backup Exec
- Mount, configure and update virtual servers using VMware vSphere
- Manage and deploy Windows Updates using SCCM, IVANTI Patch for third-party updates
- Create and Deploy Software Packages using SCCM
- Manage: SCCM, WSUS, WDS, BitLocker, McAfee Server, FLEXnet licensing server (lmtools), NI VLM, DUO Mobil, Adobe Creative Cloud, MSDN, Box.com, OKTA, MobileIron, Malwarebytes Enterprise Server on daily basis interact if necessary.
- Maintain and manage Honeywell WIN-PAK access control security system
- Maintain and replace hardware including servers, switches, workstations 
- Develop, maintain and enhance standardized images
- Setup, configure and troubleshoot hardware: servers, network, workstations, laptops, mobile device, and other
- Configure and deploy Cisco IP Phones, troubleshooting and configure Cisco Video Conference systems. Plan and deploy AV solutions for conference rooms.
- Build virtual desktops using Hyper-V, VMplayer, VMworkstation, and Oracle VM VirtualBox for research and development teams.
- Maintain and update company intranet website (Joomla) 
 - Communicate status and progress of tasks and projects with management
- Mentor and train Helpdesk team, interact if necessary to resolve critical desktop support issues.
- Interact with vendors as necessary, for equipment purchasing, maintenance and repairs, planning projects, troubleshooting, configuration and maintenance
- Maintain accurate records related to user equipment, upgrades, configurations, software licenses and other information