Lead Technical Specialist

Security Lead Technical Specialist (Architect)

Are you looking to launch your Information Technology career? If so, then UPS is the place for you!

Once known as a trucking company. UPS is now recognized as a technology company with trucks and is poised for success. Spending more than $1 billion a year on information technology, UPS provides its customers unparalleled capability in tracking and distribution intelligence. This technological infrastructure also enables UPS to provide fully integrated Web-enabled, business-to-business solutions.

UPS Information Services, a leader in information technology, is currently seeking career-minded individuals to join our team. If you are highly motivated with a degree in Computer Science or related discipline, then UPS is a great place for you to start your career.

Job Description:

This Lead Technical Specialist will create secure system architecture designs and solutions. Analyze business and technical requirements to determine appropriate information security controls. Conduct initial application or system security assessments to determine potential security gaps, threats and vulnerabilities. The successful candidate will mentor and guide other technical specialist with security related projects and education.

Responsibilities:  

• Lead the security architecture and secure application design efforts for information systems across multiple technical architectures.
• Assist application developers with secure application design and integration.
• Participate in security architecture reviews, provide secure application and infrastructure solutions for select high value and visibility projects.
• Produce security architecture designs and documented deliverables for select high value and visibility projects
• Lead the development and introduction of new security methods and technologies, including integration with existing architectures, frameworks, implementation planning, documentation of best practices, and  templates.
• Participate in application, system, and infrastructure security aassessments. Identifying threats, vulnerabilities and risks associated with key information systems or components.
• Develop threat and risk models to support improved security designs, methodologies, and controls.
• Participate in the evaluation and security assessment of new security tools, frameworks or technologies.
• Develop security Best Practices and Guidelines for new and emerging technologies.
• Educate application architects, system architects, security engineers, and application developers in the proper use and implementation of secure application design, development, and operation and monitoring.
• Support the integration of secure application design throughout the Software Development Lifecycle.

Minimum Technical Requirements:

Knowledge and Skills:

• Current, proven experience leading the security architecture effort for critical enterprise information systems across multiple platforms, frameworks and application languages.
• Familiarity with IT Security Standards &  Practices (OWASP, SABSA, NIST, COBIT, ITIL, ISO 27001).
• Familiarity with, regulatory and compliance standards (HIPPA, SOX, GLBA, PCI DSS, BASEL II, European Privacy Directive).
• Experiences with Information Classification concepts and methodologies.
• Current experience  in JAVA development, JavaScript,  SQL, and web based application architectures.
• Experience with all phases of the Systems Development Lifecycle.
• Architecture design experience with application, web layer security (Web 2.0, SOAP, SOA, Secure Messaging, and Secure Protocols).
• Experience in design or implementation of Identity Access Management Systems. 
• Architectural design or development experience with Java or .Net.

Minimum Business Skills:

• Excellent interpersonal skills, including comprehension and verbal skills, written communication, presentation, teamwork, motivation and relationship building.
• Excellent skills in the areas of analytical, problem solving and decision making. 
• Clear and articulate verbal and written communication skills;
• Demonstrated ability to work in a deadline-driven environment.
• Proficient and knowledgeable in multiple operating systems, namely MS Windows, Linux, UNIX, VMware, (z/OS preferred)
• Proficiency in use and understanding MS Windows and/or  Linux,/UNIX. (Knowledge of z/OS preferred)
• GIAC, GSEC,  SSCP, CISSP or  comparable certification preferred

Professional Work Experience:

• 8 -10+ years’ architecture experience working with network, internet and database technologies and/or equivalent application development experience with same.  6-8 years’ experience as a security architect or senior security analyst, security engineer or developer focusing on security working on large scale enterprise projects.

Education:

Bachelor's degree in Computer Science, Engineering, Information Systems or the equivalent combination of education, technical training, or work experience.