Security Configuration Compliance Analyst

3 weeks ago

Muscat, Muscat, Oman InterTech Oman Full time

Role Summary

The role is accountable for developing, maintaining, and implementing IT infrastructure hardening documents, custom scripts, and Tripwire configuration templates to ensure secure and compliant configurations across the bank's IT environment.

Roles & Responsibilities

a. Configuration Hardening Documents


• Develop and maintain standardized hardening documents for OS, DB, middleware, and infrastructure apps.


• Align documents with CIS, STIG, and vendor-specific controls.


• Ensure accuracy with organizational security policies and include automation tools like Tripwire.


• Apply version control and change management.


• Collaborate with policy owners for customizations.

b. Systems Configuration Compliance Automation


• Work with IT operations to deploy and maintain Tripwire.


• Guide teams in using and interpreting Tripwire templates.


• Develop custom scripts (Python, PowerShell, Bash) when default templates aren't adequate.


• Automate deployment and troubleshooting of templates and scripts.


• Convert policy requirements into Tripwire configuration rules.

c. Configuration Compliance Monitoring and Reporting


• Use Tripwire/scripts to monitor system compliance.


• Analyze and report deviations from baselines.


• Communicate findings and remediation plans to stakeholders.


• Prepare regular/ad-hoc compliance reports.

d. Continuous Improvement


• Stay updated on security trends and Tripwire enhancements.


• Recommend process improvements.


• Contribute to policy and procedure refinement.

e. Technical Expertise


• Participate in technical reviews and propose hardening controls.


• Collaborate on evaluating security controls in projects.


• Recommend improvements aligned with bank standards.


• Manage and execute system hardening reviews.

3. Skills Required


• Strong understanding of OS, application infrastructure, databases, and network security.


• Proficiency in Windows, Linux, and Unix.


• Security hardening knowledge (CIS, STIG).


• Scripting (Bash, PowerShell, Python), regex skills.


• Knowledge of security frameworks: ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA.


• Analytical and problem-solving abilities.


• Communication and documentation skills.


• Audit coordination and MIS preparation.


• Understanding of document/evidence lifecycle.

4. Qualifications


• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.

5. Experience Required


• 5–7 years of experience in system administration and enterprise infrastructure hardening.

6. Preferred Qualifications & Experience

Security Certifications:

o CompTIA Security+

o CISSP

o CISA

o SSCP

o CIS Benchmarks/Tripwire certs


• System Admin Certifications:

o RHCSA

o Microsoft Certified: Windows Server Hybrid Administrator Associate


• Other Preferred Experience:

o Scripting with Python/PowerShell

o Regex proficiency

o API integrations for automation

o Experience in regulated industries

o Familiarity with other security tools

#J-18808-Ljbffr

  • Security Configuration Compliance Analyst

    3 weeks ago

    Muscat, Muscat, Oman TAT IT Technolgies Full time

    We have an urgent requirement for Security Configuration Compliance Analyst - Banking domain experience is required for one of our banking client in OmanStrong Experience of 7 years in system administration and configuration hardening of Enterprise Infrastructure Must to apply for this roleStrong Experience on operating system hardening, security baselines,...

  • Security Configuration Compliance Specialist

    1 week ago

    Muscat, Muscat, Oman beBee Careers Full time

    Job Description:We are seeking a highly skilled and experienced Security Configuration Compliance Analyst to join our team. As a key member of our security team, you will be responsible for ensuring the security and compliance of our systems and infrastructure.Responsibilities:Develop and maintain standardized security hardening documents across the IT...

  • IT Security Compliance Analyst

    1 week ago

    Muscat, Muscat, Oman beBee Careers Full time

    Job Overview:We have an urgent requirement for a Security Configuration Compliance Analyst with banking domain experience. The successful candidate will be responsible for ensuring the security and compliance of our systems and infrastructure.Key Responsibilities:Configuration Hardening Documents Development and Maintenance: Develop, document, and maintain...

  • Security Configuration Compliance Specialist

    3 hours ago

    Muscat, Muscat, Oman beBee Careers Full time

    Job DescriptionWe are seeking a highly skilled Security Configuration Compliance Analyst with banking domain experience to work on a project in Oman.ResponsibilitiesDevelop, document, and maintain standardized security hardening documents across the IT infrastructure (e.g. OS, DB, middleware, Infrastructure applications).Reference the documents to industry...

  • Enterprise Infrastructure Security Expert

    1 week ago

    Muscat, Muscat, Oman beBee Careers Full time

    Job Summary:We are looking for a highly skilled and experienced Security Configuration Compliance Analyst to join our team. The successful candidate will be responsible for ensuring the security and compliance of our systems and infrastructure.Main Responsibilities:Regularly review tripwire templates and custom scripts to ensure consistency with the...

  • Sr. Cybersecurity Assurance Analyst

    4 days ago

    Muscat, Muscat, Oman Oman Arab Bank Full time

    Get AI-powered advice on this job and more exclusive features.Direct message the job poster from Oman Arab BankTalent Acquisition Specialist - Oman Arab Bank | CIPDProvide periodic and on-demand security assessment (VAPT) to IT infrastructures, systems, applications and websites.Perform Red Team activity to systems/applications.Logs all InfoSec related...

  • Security Specialist

    1 week ago

    Muscat, Muscat, Oman beBee Careers Full time

    Security Specialist">Lead the design, implementation, and support of advanced Cisco security solutions.Provide expert-level consulting on Cisco FTD, FMC, and ISE deployments, configurations, and troubleshooting.Develop automation scripts using Python to enhance security operations and optimize security workflows.Act as a trusted advisor to customers,...

  • Cloud Security and Compliance Specialist

    3 days ago

    Muscat, Muscat, Oman beBee Careers Full time

    Cloud Solution ExpertWe are seeking an expert in cloud solution design, implementation and management. The successful candidate will drive digital transformation and enhance cloud infrastructure while ensuring robust security.Key Skills:Cloud architecture designAutomation and scriptingCloud security and compliance

  • Infrastructure Security Specialist

    1 week ago

    Muscat, Muscat, Oman beBee Careers Full time

    The Network and Security Infrastructure Specialist is responsible for designing, implementing, and maintaining the network infrastructure, ensuring optimal performance, security, and reliability.Responsibilities:Design, configure, and maintain network infrastructure, including routers, switches, and firewalls.Manage and optimize routing and switching...

  • Network and security infrastructure Specialist

    4 weeks ago

    Muscat, Muscat, Oman TAT IT Technolgies Full time

    We have an urgent requirement for a Network and Security Infrastructure Specialist with strong experience in multi-data center environments for our banking client in Oman.Experience: 6+ yearsLocation: OmanCertifications: CCNA, CCNP, Fortinet NSE, CISSP, or similar are highly preferred.Requirements:Strong network and security infrastructure management in...