Mainframe Security Engineer

NewGen is seeking a Mainframe Security Engineer to analyze business requirements to design, engineer, and implement the best security solutions for their needs. Apply technical skills to find the balance between enabling and securing the Client's organization with the cognitive solutions that are making them the fastest growing enterprise security business in the world. You will be doing hands-on mainframe z/OS Security administration in this position. 

Responsibilities

• Implement and configure z/Secure controls on client machines
• Create z/Secure Alerts and configurations as required by Partner and per any customer requirements
• Create and maintain compliance reporting through z/Secure
• Provide system and security vulnerability detection using z/Secure
• Remediate or forward any vulnerabilities found in reports to required personnel
• Provide monthly and quarterly reports
• Run installation jobs and scripts
• Conduct system-wide performance tuning
• Recommend process improvements to ensure system scalability and reliability
• Assist customers in developing and maintaining a secure Cybersecurity Baseline that meets RMF for DOD IT and other certifications and specifications as required
• Assist in the preparation of network infrastructure specifications or designs, incorporating required information security features
• Create and monitor RACF/architecture based on Partner's best practices
• Work with the Security Operations Center and SIEM team to ensure proper system logging requirements are being met
• Create/modify and track tickets within ServiceNow (SNOW)

Requirements

• ship, Able to pass Standard Government Background Check
• At least 5 year experience working with mainframes
• Well versed in using RACF
• Able to use the z/OS operating system to install, customize, and maintain support of mainframe software and operation procedures used by development teams as well as installation and customization of program products
• Knowledge of security frameworks, including MITRE, ATT&CK, OWASP, NIST, CSF, etc.
• Knowledge of JCL, REXX, JES2, RACF, SMP/E, TCP/IP, ISPF