Loading...
Share this Job

Information Security Sr Manager

Date:  Sep 10, 2021
Location: 

Dallas, TX, US

Requisition ID:  30269

ABOUT AVAYA

Businesses are built by the experiences they provide, and every day millions of those experiences are delivered by Avaya Holdings Corp. (NYSE: AVYA). Avaya is shaping what's next for the future of work, with innovation and partnerships that deliver game-changing business benefits. Our cloud communications solutions and multi-cloud application ecosystem power personalized, intelligent, and effortless customer and employee experiences to help achieve strategic ambitions and desired outcomes. Together, we are committed to help grow your business by delivering Experiences that Matter. Learn more at www.avaya.com.

ABOUT THE OPPORTUNITY

The incumbent develops, implements, and governs processes and documentation to facilitate the implementation of an enterprise-wide security operations policy, as well as associated standards, controls and procedures.

#LI-NA1

#LI-remote

ABOUT THE RESPONSIBILITIES

Key responsibilities include:

  • Identification of critical information (e.g., the security categorization process);
  • Analysis of threats;
  • Analysis of vulnerabilities;
  • Assessment of risks; and
  • The application of appropriate countermeasures.
  • Maintain documentation of the quarterly review process to include:
    • Documenting results of the reviews; and
    • Review and sign-off of results by personnel assigned responsibility for compliance programs.
  • Develops a Global Security Concept of Operations (CONOPS) for systems containing at a minimum, how the organization intends to operate the systems in public cloud, private cloud hybrid cloud on premise data centers and customer data center environments from the perspective of cybersecurity;
  • Document technical measures implemented to apply defense-in-depth techniques (e.g., deep packet analysis, traffic throttling and black-holing) for detection and timely response to network-based attacks associated with anomalous ingress or egress traffic patterns (e.g., MAC spoofing and ARP poisoning attacks) and / or distributed denial-of-service (DDoS) attacks; and
  • Reviews and updates the CONOPS at least annually.

The incumbent must maintain current situational awareness of trends in cybersecurity threats, especially those related cloud operations and architecture.  The incumbent must be able to shift from working detailed technical issues with peers to communicating those issues to customers at varying levels of technical detail.  In addition to communicating to a variety of audiences, the incumbent must also be able to think effectively at both a technically detailed level and strategically.

ABOUT THE REQUIREMENTS

The incumbent must:

  • Possess a solid grounding in information security principles and passion for security operations
  • Possess a deep understanding of cloud computing concepts and cloud security
  • Have experiences of implementing and assessing security within some combination of Public, Private, Hybrid Cloud Environments, Outsourced Data Centers and Customer Data Centers;have experience with service-oriented architecture, private and hybrid clouds, and web services security;possess in depth experience with at least two of the following cloud security toolsets:
    • Azure:  Security Center, Cloud App Security, and Sentinel
    • Google:  Security Command Center, Cloud Key Management, Confidential Computing, or 
    • AWS:  AWS Shield, Guard Duty, Macie
    • Palo Alto Prisma Cloud
  • Have effective verbal and written communication skills;
  • Able to independently develop white papers, brochures, presentations and respond to customer questionnaire on operational security issues;
  • Possess a solid understanding of industry standards such as PCI DSS, ISO 27xxx, HIPAA, NIST, etc;
  • Exhibit flexibility and an ability to think creatively and in a way that identifies solutions;
  • Willing to analyze challenges and share opinions on possible solutions;
  • Able to quickly assess priorities and triage matters; 
  • Able to solve complex problems; 
  • Exhibit calm under pressure; 
  • Understand business processes; 
  • Demonstrate high levels of motivation and achieve success without task-by-task direction; 
  • Act with the highest levels of professionalism and integrity; and 
  • Treat others with respect.

 

Education / Experience

  • Bachelor’s degree in computer engineering, computer science, or related field.
  • 5+ years of working with some combination of Security Operations within Azure, AWS, GCP, and private- or hybrid-cloud deployments, including at least 3 years of development, operations, and oversight of security operations for large cloud deployments, to include standard cloud security toolsets.
  • Experience with ElasticStack (ELK) and industry certifications (CCSP, CCSK, CCP, etc). are pluses. Network, Router, API experience of getting systems talking to each other.

EXPERIENCE

7 - 10 Years of Experience

EDUCATION

Bachelor degree or equivalent experience

FOOTER

Avaya is an Equal Opportunity employer and a U.S. Federal Contractor. Our commitment to equality is a core value of Avaya. All qualified applicants and employees receive equal treatment without consideration for race, religion, sex, age, sexual orientation, gender identity, national origin, disability, status as a protected veteran or any other protected characteristic. In general, positions at Avaya require the ability to communicate and use office technology effectively. Physical requirements may vary by assigned work location. This job brief/description is subject to change. Nothing in this job description restricts Avaya right to alter the duties and responsibilities of this position at any time for any reason. You may also review the Avaya Global Privacy Policy, accessible at https://www.avaya.com/en/privacy/policy/ and applicable Privacy Statement relevant to this job posting accessible at https://www.avaya.com/en/documents/info-applicants.pdf. For Job Postings within European GDPR Countries you can access this document for additional Data Privacy Information: https://www.avaya.com/en/documents/gdpr-info-applicants.pdf


Nearest Major Market: Dallas
Nearest Secondary Market: Fort Worth