Item 14 - Agreements for As-Needed Information Technology Services

Home Browse Search

years working in security -related areas; CEH certification; knowledge in networking (routing and switching), systems administration for Windows and Linux; experience in Penetration Test Assessment; experience with SIEM tools and programming; ability to evaluate and recommend preventative and corrective controls to mitigate risk to the Airport Board; and working knowledge on Forensic artifacts as they pertain to Windows and Linux operating systems. Normal methods of talent Partnered with a local vendor of security and intrusion detection acquisition were not turning up software that had a database of local candidates that they let us speak the type of candidate that our to. This strategy allowed us to locate, through a referral of one of these client was hoping to find individual subject matter experts, the candidate who was ultimately brought on for the role. Successful Placement #3 — Security Test Architect Description: Dallas/Fort Worth International Airport requires a dedicated security test architect to drive web application security and secure DevOps processes throughout the DFW ITS organization and establish secure coding practices used by development teams across the company; specifically, in support of ITS Projects to centralize as a one source tracking. This position is critical to establishing and maintaining secure systems while simultaneously promoting a culture of rapid and reliable software across DFW. Responsibilities are to work with the web application team which enables the development of secure and reliable applications; work with the Security Vulnerability management team to develop an understanding of business objectives, application architecture, and functionality of the projects they are assigned to; collaborate with software development leaders to establish metrics that demonstrate security proficiency across all major development teams; identify potential threat vectors in software applications and cloud architecture that could be used by attackers and cause disruption or a potential data breach; demonstrate security leadership across the DFW organization; work with Vulnerability Management Security team members to ensure all software vulnerabilities are tracked, remediated and retested; lead the development of automated test scripts which are incorporated into the software development lifecycle and are effective at identifying potential software treats and configuration vulnerabilities; ensure processes associated with application security and cloud security of key systems are documented, maintained, and archived; collaborate with development and operations teams to develop the standards for web application security, cloud security, and mobile app security; lead security assessments of critical company infrastructure and applications as needed; and work closely with QA Test team on day to day basis on issue fixing and also involve Other duties as required with Security Team. .Qualifications: BS in Computer Science Engineering, Cyber Security or equivalent; 5+ years overall experience in software solution implementation; experience in static and Dynamic code analysis; working experience in DevSecOps environment; certification or expertise in Appian, PHP, application scanning tools; expertise in cloud computing technologies, business drivers, and emerging computing trends; working knowledge of the SDLC process; working knowledge in BurpSuite, Nessus, IBM Appscan, Kali Linux; working knowledge RFP No. 20-124 Information Technology As -Needed Professional Services Page 1 55