Jobs at Collabera

Support information security and vendor risk management activities: perform due diligence for vendor assurance, track mitigation progress, contribute to policy and controls, report metrics, and assist security, risk, and compliance initiatives across the enterprise.

Provide Tier 2 network security support for shared firewall environments: configure and maintain Cisco, Juniper, and Fortinet firewalls; perform code upgrades, VPN setup, MACD, performance and rule analysis; validate designs, recommend minor architecture changes, and troubleshoot end-to-end network and application connectivity with 24x7 production support.

Design and review secure application architectures and IAM solutions, perform vulnerability and code-level reviews and penetration testing, apply secure coding practices for high-volume transactional systems, coordinate cross-functional teams for audits, and manage security projects while ensuring compliance with standards and regulatory requirements.

Perform blackbox and whitebox software vulnerability assessments, use penetration testing and scanning tools, remediate OWASP Top 10 issues, implement secure development practices, conduct debriefs with development teams, and work with IDEs and source management systems.

Implement whole-disk encryption for end-user devices using Microsoft encryption solutions and SCCM. Deploy software, remediate SCCM deployment and scripting issues, work with end users and the SCCM team to resolve problems, and develop tracking methods for implementation.

Support information security and risk management initiatives including vendor risk management, due diligence for vendor assurance, policy and standards development, tracking mitigation progress, reporting metrics, and contributing to security and compliance programs across the enterprise.

Lead IT Security Systems Engineer responsible for designing and implementing authentication, PKI, and encryption solutions; securing Oracle databases and UNIX platforms (RHEL, Solaris, AIX); troubleshooting across application and network layers; developing on UNIX using Java, Perl, and shell; and collaborating with stakeholders.

Provide IT support for business processes with focus on SAP security administration. Participate on teams, apply IT analyses, complete basic changes to documented processes, and support roles/objects/user profiles in SAP across application, distributed, and mainframe environments.

Manage the database vulnerability program: identify, track, communicate, and drive remediation of database vulnerabilities across application teams. Report remediation progress, advise technical and third-party teams on fixes and secure configuration best practices, and coordinate follow-up until closure.

Support and improve IT security processes for SAP and mainframe environments. Participate in design, development, testing, implementation, and support of low-to-moderate complexity technology and business processes. Analyze security roles, user profiles, and policies; perform SAP security administration; collaborate with global teams and provide customer-focused support.

Perform automated and manual penetration tests on applications and infrastructure, assess security controls and network devices, document findings, and support remediation with development teams following industry best practices and frameworks.

Lead and execute IT compliance audits and risk assessments focused on PCI. Test and document system records, prepare audit plans and written reports, identify root causes, recommend controls, and provide technical guidance and mentoring to audit staff.

Administer user credentials and maintain RACF, network, User-ID and user groups. Apply IT security policies, troubleshoot low-to-medium security issues, support SAP security and participate on teams and process-improvement projects. Make routine decisions for exceptions and contribute to projects related to existing tools and processes.

Perform software vulnerability assessments (blackbox/whitebox), remediate OWASP Top 10 issues, and advise development teams. Leverage penetration testing frameworks, scanners, and source code analysis while working with Java/.NET web apps and SQL databases. Communicate findings and conduct debriefs with engineering teams.

Support email security initiatives: analyze gateway logs and reports, implement and test email authentication (SPF, DKIM, S/MIME), evaluate email security products, create/update process documentation, and coordinate with internal and external stakeholders to enforce email security controls.

Provide technical security advisory and operational security for information systems, manage day-to-day security operations, perform vulnerability and risk assessments, support Certification & Accreditation, produce SSPs/C&A documentation and SOPs, and evaluate/manage security solutions and changes for classified processing.

Work on infrastructure email security projects: coordinate with teams, analyze gateway logs, implement SPF/DKIM/S/MIME controls, test email security software, and maintain process documentation.

Lead design, implementation, tuning, and administration of enterprise ArcSight SIEM (ESM/Logger/SmartConnectors). Develop content (reports, filters, dashboards, FlexConnectors), optimize deployments, translate use cases to detection content, and support DoD information assurance and log management requirements.

Manage and maintain application, network, and data security; administer user credentials and SAP security (roles, objects, user profiles); operate RACF and related security tools; resolve low-to-medium security incidents; follow and refine security processes; consult with business owners and participate on cross-functional teams.

Lead execution of SOC1/SSAE16 audits and manage IT risk, compliance, and security controls. Advise stakeholders on IT risk mitigation, vendor controls, incident management, IAM, and security monitoring. Develop policies, metrics, documentation, and remediation plans; support audits, provide technical support for security tools, and lead multiple initiatives to improve enterprise IT risk and compliance maturity.