Information Security Engineer - Mainframe, RACF, JCL

In this role, you will:

• Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards
• Track or remediate vulnerabilities and security issues
• Review and correlate security logs
• Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Provide technical support for security related issues
• Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
• Interface with more experienced technologists

Required Qualifications:

• 2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 2+ years of information security applications and systems experience
• 2+ years of mainframe security risk assessment and remediation experience
• Hands on Resource Access Control Facility (RACF) experience
• Mainframe security experience using native z/OS and RACF tools
• Experience issuing RACF commands and performing diagnosis
• JCL (Job Control Language) experience, developing and maintaining large batch workloads, understanding and supporting large batch workloads, diagnosing problems, taking corrective actions to resolve problems.
• TSO (Time Sharing Option) experience
• Hands-on development experience in CARLA, SAS, REXX, IBM zSecure
• Hands-on development experience in COBOL programming, DB2, CA7 or similar scheduler
• zSecure tool experience is a plus
• Information Security technical skills and understanding of information security practices
• Ability to analyze complex issues and troubleshoot
• Excellent verbal and written communication skills
• Have experience working on agile/scrum methodology, using Jira, service now
• Aware of CI/CD, change and release management

Job Expectations:

• Job Location: Bangalore or Hyderabad
• Required to work in the office as per organizations In Office Adherence Return to Office (RTO) at a minimum of 3 days per week
• Ability to work on call as assigned
• Flexibility to frequently be on call beyond normal working hours
• Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to RACF IAM applications
• Provides operational support for a large system of compliance and audit related jobs that execute 24/7/365.
• Work with internal and end-user personnel to define customized access solutions, reporting, notification, and data gathering as required.
• Participates in the research, analysis, design, testing and implementation of complex computer security/protection technologies for company information and systems/applications.
• Using a Wells Fargo methodology, assists other engineers in researching, analyzing, designing, testing and implementing security solutions.
• Assists other engineers with analysis to identify security vulnerabilities and conduct security risk assessments to ensure compliance with corporate security policies and adherence to best practices.
• Assists in computer security incident response activities and technical investigations of security-related incidents.
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals