Network Security Specialist II

ABOUT VIAPLUS : ViaPlus is a global mobility company in the Intelligent Transportation Systems (ITS) market, specializing in revenue and services management solutions for the transportation industry. Our customer operations, data analytics, and full-featured, single-account back-office technology facilitate the high-volume transactions required for seamless multimodal mobility. As a VINCI Highways subsidiary, we are committed to technical innovation and to promoting a positive mobility experience for all. We are pioneers in the transportation transaction and mobility industry, with a decade of proven global experience in providing solutions focused on the tolling and transit industries. ViaPlus is headquartered near Dallas, Texas, and maintains offices across the United States, France, India, and Ireland. We are part of the global network of VINCI Concessions, an international player in transport infrastructure with projects in 23 countries. Our vision has evolved to provide a fully automated, end-to-end transportation solution that significantly improves revenue collection and efficiency while effectively lowering costs for our agency clients. We serve enterprises that require high-volume, real-time transaction processing with the highest levels of accuracy, especially where revenue reconciliation and customer account management are key deliverables to the customer experience. Our flagship back-office system (BOS) enables Mobility-as-a-Service (MaaS) with a “one account” feature that supports multimodal transportation solutions. In a rapidly changing environment, ViaPlus maintains a strong focus on technology and continuous R&D to improve agency efficiencies, reduce operating expenses, and maximize revenue – all while providing exceptional customer service. Learn more: http://www.viaplus.com ABOUT VINCI HIGHWAYS VINCI Highways, a VINCI Concessions subsidiary, is a leader in road concessions, operations and mobility services. We design, finance, build and operate highways, bridges, tunnels, urban roads and mobility services on a network of more than 3,360 km in 15 countries. VINCI Highways leverages its expertise to deliver the highest performance and safety standards and provide drivers with a positive experience. More information: https://www.vinci-concessions.com/en/vinci-highways https://www.linkedin.com/company/vinci-highways/ VINCIConcess JOB PROFILE : Network Security Specialist II JOB LOCATION: Anaheim, CA (On-Site) JOB RESPONSIBILITIES: Maintain integrity and confidentiality of company data and information systems by taking proactive measures via monitoring the environment for unauthorized users, unusual activity, and security threats, applying patches, responding to alerts/vulnerabilities by researching and making recommended configuration changes, blocking non-false positive threats, and updating security controls and access lists. Corrective measures will be taken promptly, and a report will be provided on security measures taken to address threats. Other duties include configuring, testing, maintaining, and monitoring network intermediary devices, which include switches, routers, firewalls, and intrusion detection systems, performing security audits, creating documentation for PCI DSS standards and other security requirements, and training staff on security policies. Include the following. Other duties may be assigned. The order of the duties listed does not represent the importance and/or percentage of time dedicated to each duty. • Experience with PCI DSS Audits and ability to provide evidence of compliance, remediations, and other PCI requirements. • Able to monitor threat detection, and test encryption technologies such as SSL, tokenization, and VPN. • Experience with IT security policies, controls processes, procedures, security tools, and technologies to protect applications, data, privacy, operating systems (Windows and Linux), and the network infrastructure. • Develops plans to safeguard data and information systems against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs. • Train users to promote security awareness to ensure overall system security; training includes administering incident response exercises to address potential system vulnerabilities and breaches. • Configuration, testing, deployment, and maintenance of encryption technologies (i.e. PGP, GPG, SSL, VPN, and tokenization) to protect confidential information as it is being transmitted to prevent tainted digital transfers. • Perform web server configuration for Windows and Linux operating systems to harden/secure the environment. • Configure, test, deploy, and maintain Cisco Layer 2 and Layer 3 switches, routers, and firewalls. • Utilize various security monitoring services and devices (i.e. SIEM, WAF, Web Filter, Spam Filter, Network Protocol Analyzer, Internal and External Vulnerability Scans) for proactive and forensic analysis and response. • Perform routine security and network checks as required by PCI DSS standards and internal policies and procedures, this includes performing a daily review of all logs from servers, routers, firewalls, IDS, security appliances, etc. • Test and distribute patches within one month of release • Communicate professionally with users and vendors verbally and in written form. • Write technical documentation to comply with PCI DSS standards and create and maintain network diagrams. • Rotation of on-call support. Will require some night and weekend work for scheduled production maintenance and emergency support. QUALIFICATIONS: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. • Ability to work with minimal direction in a fast-paced/high-pressure environment. • Ability to prioritize tasks and directly support the department managers. • Good troubleshooting and error isolation skills. • Ability to work independently on assigned tasks as well as to accept direction on given assignments. • Must be able to interact and communicate with individuals at all levels of the organization. • Experience with Windows-compatible computer hardware, software, and TCP/IP networking • Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems. • Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions. • Considering the relative costs and benefits of potential actions to choose the most appropriate one. • Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming. • Must be willing to work additional hours as necessary • Excellent communication and documentation skills • Experience working with Windows servers, including Active Directory and proper disk configurations • Familiarity with PCI audit • Familiar with PCI industry standards such as ISO, NIST Framework, PCI DSS Compliance • Experience with PCI DSS compliance preferred. EDUCATION & EXPERIENCE: • Bachelor’s degree in computer science, information systems, or related field preferred. • Two (2) – Four (4) years of experience in cyber security systems or information systems. • Professional certification for network security (CCIE, CCNP, or CCNA for Security; SSCP, CISSP, CompTIA Security). • Professional certification for Linux Administration preferred (CompTIA Linux, CLA, CLP, RHCSA) • Experience with VMware, Cisco network devices, and Security monitoring tools. SUPERVISORY RESPONSIBILITIES N/A WORK ENVIRONMENT The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform essential functions. While performing the duties of this job, the employee is regularly required to use hands and reach with hands and arms, hear, and talk. The employee will be working and navigating on a computer. The employee occasionally is required to stand, sit, stoop, kneel, crouch, and walk. The employee may occasionally be required to lift and/or move up to 20 pounds. The work environment is usually moderate to loud.