Security Configuration Compliance Analyst

24 hours ago


Muscat, Muscat, Oman TAT IT Technolgies Full time
We have an urgent requirement for Security Configuration Compliance Analyst - Banking domain experience is required for one of our banking client in Oman

Strong Experience of 7 years in system administration and configuration hardening of Enterprise Infrastructure Must to apply for this role

Strong Experience on operating system hardening, security baselines, and configuration best practices (e.g., CIS Benchmarks, STIG Must apply for this role

Strong experience in translating security policies and standards into technical configurations is Must to apply for this role

Strong experience on Application Infrastructure, Data Integrity and Security, Enterprise Database Systems and Network Security is MUST

Configuration Hardening Documents Development and Maintenance.
  • Develop, document, and maintain standardized Security hardening document across the IT infrastructure (e.g. OS, DB, middleware, Infrastructure applications)
  • Reference the documents to industry best practices (e.g. CIS, STIG, and vendor specific hardening controls) to ensure the full coverage of the technology hardening.
  • Ensure the documents accurately reflect organizational security policies and configuration baselines.
  • Ensure the developed documents are accompanied with custom automated scripts, tripwire templates or any form of automated checks.
  • Regularly review and update the hardening documents to incorporate new policies and industry best practices.
  • Implement version control and change management processes for configuration hardening documents.
  • Collaborate with policy owners to understand and interpret security policies and standards to perform necessary customization to hardening documents.

Systems Configuration Compliance Automation
  • Work closely with IT operations teams to implement and maintain Tripwire configurations for various operating systems, databases, middleware and applications.
  • Provide guidance and support to technical teams on the proper use and interpretation of Tripwire configuration templates.
  • Develop and maintain scripts (e.g. Python, PowerShell and Bash) to define custom rules

Regularly review tripwire templates and custom scripts to ensure consistency with the hardening documents.
  • Automate the deployment and management of custom Tripwire templates using scripting and regex.
  • Troubleshoot and debug custom scripts to ensure accurate and reliable configuration monitoring.
  • Translate policy requirements into specific scripts, Tripwire configuration rules and monitoring parameters.

Configuration Compliance Monitoring and Reporting
  • Utilize Tripwire or scripts to monitor and report on configuration compliance status across the organization.
  • Analyze Tripwire findings and identify systems that deviate from defined configuration baselines and policies.
  • Communicate effectively with technical and non-technical stakeholders regarding configuration compliance status and remediation efforts.
  • Generate regular and ad-hoc reports on configuration compliance posture for management and relevant stakeholders.
  • Identify and address discrepancies between Tripwire configurations and organizational policies and baselines

Continuous Improvement
  • Stay up-to-date on the latest security trends, best practices, CIS and STIG baseline updates and Tripwire product updates.
  • Identify opportunities to improve the efficiency and effectiveness of Tripwire configuration management processes.
  • Contribute to the development and refinement of configuration management policies and procedures.

Technical Expertise
  • Participate in technical discussions by explaining/demonstrating attacks and explain the recommended hardening controls to IT.
  • Collaborate with application developers, management and project management teams by reviewing and measuring the effectiveness of proposed security controls to be implemented before proceeding with the implementation.
  • Identify best practices and continuously propose improvements to technical processes, procedures and guidelines in alignment with the bank's standards.
  • Plan and manage the execution of hardening document reviews and systems configuration hardening reviews.

Skills: application infrastructure,regex,enterprise database systems,cis benchmarks,scripting,powershell,compliance,data integrity and security,python,configuration hardening,security,configuration best practices,configuration,network security,bash,stig,tripwire,system administration,operating system hardening,security baselines
#J-18808-Ljbffr

  • Muscat, Muscat, Oman beBee Careers Full time

    **Job Summary:**We are seeking a highly skilled Security Configuration Compliance Analyst to join our team. The successful candidate will be responsible for ensuring the security and compliance of our systems and infrastructure.This is an exciting opportunity for a talented professional to make a significant impact on our organization's security posture.


  • Muscat, Muscat, Oman beBee Careers Full time

    As a Configuration Compliance Expert, you will play a vital role in ensuring the security and compliance of our organization's infrastructure.You will be responsible for developing and maintaining scripts to define custom rules, automating the deployment and management of custom Tripwire templates using scripting and regex, and troubleshooting and debugging...


  • Muscat, Muscat, Oman beBee Careers Full time

    We are seeking a seasoned Security Configuration Specialist to join our team. This role is crucial in ensuring the security and integrity of our infrastructure.The ideal candidate will have a strong background in system administration, configuration hardening, and security baselines. They will be responsible for developing and maintaining standardized...


  • Muscat, Muscat, Oman beBee Careers Full time

    **About the Role:**The Configuration Security Specialist will work closely with IT operations teams to implement and maintain Tripwire configurations for various operating systems, databases, middleware, and applications.The ideal candidate will have strong experience in system administration and configuration hardening of Enterprise Infrastructure, as well...


  • Muscat, Muscat, Oman beBee Careers Full time

    As a Configuration Management Specialist, you will be responsible for ensuring the security and compliance of our organization's infrastructure.You will develop and maintain scripts (e.g., Python, PowerShell, Bash) to define custom rules, automate the deployment and management of custom Tripwire templates using scripting and regex, and troubleshoot and debug...


  • Muscat, Muscat, Oman beBee Careers Full time

    We are looking for a highly skilled Security Hardening Engineer to join our team.The ideal candidate will have experience in translating security policies and standards into technical configurations, identifying best practices, and proposing improvements to technical processes, procedures, and guidelines in alignment with the bank's standards.Translating...


  • Muscat, Muscat, Oman beBee Careers Full time

    Technical Skills:We're looking for someone with deep expertise in data center equipment and software who can work independently while collaborating with remote teams. The ideal candidate will have extensive hands-on experience with Cisco and Juniper networking devices.Responsibilities:Managing and troubleshooting Windows and Linux-based systems, keeping...


  • Muscat, Muscat, Oman beBee Careers Full time

    Job Description:We are seeking a highly skilled and experienced Network Specialist to join our dynamic IT team. The ideal candidate will be responsible for the design, implementation, and maintenance of our network infrastructure, ensuring optimal performance, security, and reliability.Key Responsibilities:Network Design and Implementation: Design,...


  • Muscat, Muscat, Oman TAT IT Technolgies Full time

    We have an urgent requirement for a Network and Security Infrastructure Specialist with strong experience in multi-data center environments for our banking client in Oman.Experience: 6+ yearsLocation: OmanCertifications: CCNA, CCNP, Fortinet NSE, CISSP, or similar are highly preferred.Requirements:Strong network and security infrastructure management in...


  • Muscat, Muscat, Oman beBee Careers Full time

    We have an urgent requirement for a Network and Security Infrastructure Specialist with strong experience in multi-data center environments. The ideal candidate will be responsible for designing, implementing, and maintaining our network infrastructure, ensuring optimal performance, security, and reliability.Responsibilities:Design and Implementation:...