The Cybersecurity team is globally responsible for helping the organization balance risk by aligning policies and procedures with Moody's business and regulatory requirements.
The team is responsible for the development, enforcement and monitoring of security controls, policies and procedures, disaster recovery programs, GRC (Governance, Risk and Compliance) reporting and the delivery of security services including the company's Cyber Security program.
Functional Responsibilities
- Support successful delivery of Information Security projects and services for our customers by working directly with key business stakeholders and technology SMEs.
- Provide engineering and operational support for network security products and services (new deployments, hardware refresh/upgrades, migrations, and feature implementation).
- Support the evaluation of security concerns with new and emerging technologies.
- Mentor and guide other teams in the organization on network security best practices, security vulnerabilities and implementation/enforcement of the compensating controls.
- Assist with creating security designs and configure security Controls within the Cyber Security Engineering portfolio
- Develop, collect, and mature security metrics for IT Risk programs.
- BS or BA degree or relevant certifications, preferably in Information Systems, Computer Science, Computer Engineering or equivalent
- 7+ years of solid, diverse work experience in the IT industry, including experience in Network, Cloud or Security engineering technologies:
- Primary requirements:
- Firewalls (Palo Alto preferred)
- WAF (Cloudflare preferred)
Secondary requirements:
- Routing and Switching (Cisco, Palo Alto, Juniper)
- Remote Access/VPN Solutions
- NAC
- SIEM tools, i.e.
Splunk
- Relevant experience in at least one of the following Security domains; Application, Endpoint or Network security
- Basic experience with cloud technology; AWS, Azure, GCP
- Working knowledge of DNS, PKI
- Scripting
Key Competencies
- Adaptability and flexibility to work on a variety of assignments as defined by constantly evolving priorities.
- Knowledge of AWS, GCP, or Azure Cloud technologies, Active Directory, certificates, Authentication/Authorization protocols, and Single Sign On technologies.
- Technical expertise (design and/or implementation) with Palo Alto FW's or other NGFW
- Solid understanding of network and security concepts, including PKI and DNS
- Good understanding of Web Application firewalls, its function, OWASP rules, and integrations into load balancers.
- Ability to quickly assimilate new technologies, tools, internal/external systems and design frameworks.
Strong and broad technology background.
- Excellent written and oral communication skills including the ability to interact directly with customers that do not have an IT background.
Information Risk and Security - Cyber Security Services
Moody's is an equal opportunity employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.
Moody's is a global integrated risk assessment firm that empowers organizations to make better decisions.