Lead Technical Specialist

Lead Technical Specialist

Are you looking to launch your Information Technology career? If so, then UPS is the place for you!
Once known as a trucking company. UPS is now recognized as a technology company with trucks and is poised for success. Spending more than $1 billion a year on information technology, UPS provides its customers unparalleled capability in tracking and distribution intelligence. This technological infrastructure also enables UPS to provide fully integrated Web-enabled, business-to-business solutions.

UPS Information Services, a leader in information technology, is currently seeking career-minded individuals to join our team. If you are highly motivated with a degree in Computer Science or related discipline, then UPS is a great place for you to start your career.

Job Description:

This security Lead Technical Specialist is required to meet the organizational demand for information security expertise in support of infrastructure technology and application development initiatives.

This Lead Technical Specialist will:

• Create secure system architecture designs and solutions
• Analyze business and technical requirements to determine appropriate information security controls.
• Conduct initial application or system security assessments to determine potential security gaps, threats and vulnerabilities.

The successful candidate will mentor and guide other technical specialist with security related projects and education.

The selected Lead Technical Specialist will possess:

• Current, proven experience leading the security architecture effort for critical enterprise information systems across multiple platforms, frameworks and application languages.
• Experience with all phases of the Systems Development Lifecycle.
• Architecture design experience with application, web layer security (Web 2.0, SOAP, SOA, Secure Messaging, and Secure Protocols).
• Experience in design or implementation of Identity Access Management Systems.
• Current experience in JAVA development, JavaScript, SQL, and web based application architectures.

Responsibilities:

• Lead the security architecture and secure application design efforts for information systems across multiple technical architectures.
• Assist application developers with secure application design and integration.
• Participate in security architecture reviews
• Provide secure application and infrastructure solutions for select high value and visibility projects.
• Produce security architecture designs and documented deliverables for select high value and visibility projects
• Lead the development and introduction of new security methods and technologies, including integration with existing architectures, frameworks, implementation planning, documentation of best practices, and templates.
• Participate in the evaluation and security assessment of new security tools, frameworks or technologies.
• Develop security Best Practices, Standards and Guidelines for new and emerging technologies.
• Educate application architects, system architects, security engineers, and application developers in the proper use and implementation of secure application design, development, and operation and monitoring.
• Support the integration of secure application design throughout the Software Development Lifecycle.

Primary Skill:  

Current working experience in security concepts, methods, best practices and technologies as applied to the enterprise environment, specifically including:

• Network security protocols, methods and technologies
• Experience with implementing Application and Web Layer Security (Web 2.0, SOAP, SOA, Secure Messaging, and Secure Protocols)
• Experience with Identity Access Management and Access Control technologies
• Knowledge of and experienced preferred in VM and mobile security standards and solutions

Additional Skills:  

• Familiarity with IT Security Standards & Practices (OWASP, SABSA, NIST, COBIT, ITIL, ISO 27001).
• Information asset classification concepts and methods
• Knowledge of continuity of operations planning and disaster recovery strategies and architectures
• Familiarity with compliance domains such as SOX, PCI, HIPAA, EU Data Privacy Directive, US state privacy and breach notification statutes

Education:

The desired Lead Technical Specialist will possess a Bachelor’s degree in Computer Science or related discipline or the equivalent in education and work experience.

GIAC, GSEC, SSCP, CISSP or comparable certification preferred