Network Security Specialist, Information Technology, Hughes Main Library

Required:

• Bachelor’s degree from an accredited four-year college or university.
• Two years of Windows and Linux networking administration. 
• Minimum two to four years’ experience in networking security. 
• Other combinations of experience, education and training that meet the minimum requirements may be substituted. 

Preferred:  

• Bachelor’s degree in Information Systems, from an accredited four-year college or university.
• Security+ certification and/or SANS GIAC certification.

Must have the ability to:

• concentrate for long periods of time
• speak clearly and distinctly
• hear and/or comprehend verbal communication
• see and interpret all job-related materials and distinguish standardized cable color-coding and equipment warning lights
• lift and move up to 40 pounds 
• stand for long periods of time
• sit for long periods of time
• walk, bend, and stoop
• reach, grasp and use hands to touch, handle or feel
• type on an ongoing basis for long periods of time, using both hands
• tolerate low levels of dust and mold associated with working around paper files, books, and other library materials

• Use of personal vehicle with mileage reimbursement is required. 
• Valid S.C. driver’s license required. 
• Some evening, weekend and holiday work required. 
• Required to carry cell phone when on-call. 
• Potential exists for being called to a Library System location after departure or on the weekends.

These tasks are illustrative only; to carry out the day-to-day functions of the job, other duties may be performed. The omission of specific statements does not exclude them from the position if the work is similar, related or a logical assignment to the position. Essential job functions designated with (E).

• Independently plans and carries out security measures to protect the Library’s computer systems and networks. (E)
• Monitors Library System networks for security incidents and takes initiative to investigate potential violations and recommends remediation. (E)
• Installs and configures firewalls, access control lists (ACL’s) and data encryption programs, to protect sensitive information. (E)
• Conducts periodic penetration testing to determine system vulnerabilities. (E)
• Using self-research, stays current with the latest Information Technology security trends and independently recommends security enhancements to library management to follow industry best practices. (E)
• Develops, monitors and maintains security training program. (E)
• Initiates the Library System’s PCI DSS networking standards to meet requirements for compliance. (E)
• Implements, schedules and periodically tests disaster recovery methods on critical systems in response to any system failure. (E)
• Creates and maintains documentation of procedures relating to network security. (E)
• Uses online project management system for task completion and meeting deadlines.
• Responsible for understanding programming code vulnerabilities and creating server operating system security baselines. (E)
• Participates in IT on-call rotation. (E)
• Ensures safe work methods are followed to prevent injury. (E)
• Performs tasks in accord with Library vision, mission and code of service. (E)
• Works a schedule that meets the needs of the unit. (E)
• Maintains regular and reliable attendance and remains compliant with the Library System’s Attendance Guidelines. (E)
• Performs other associated or required duties as assigned, including those of other staff members in the unit.

(Testing of computer skills may be part of the interview process for this position.)

• Good understanding of library functions in an online environment.
• Detailed knowledge of LAN/WAN and TCP/IP protocols.  
• Understanding of setup and configuration of Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS) and Host-based intrusion detection systems (HIDS).  
• Knowledge of TFTP for router/switch configuration backup, hard disk and public/private key encryption.  
• Familiar with internal/external penetration testing and cardholder data environments (CDE).  
• Strong organization skills.
• Customer service oriented. 
• Detail oriented.
• Ability to communicate well orally and in writing. 
• Ability to create clear procedural documentation in written and electronic formats. 
• Ability to work in a team environment with both technical and non-technical coworkers and end-users. 
• Ability to work independently and be a self-starter. 
• Ability to maintain workflow of multiple tasks simultaneously. 
• Ability to work with time pressures and frequent change of tasks. 
• Ability to use good judgment and discretion in carrying out duties and responsibilities.
• Ability to modify/update existing programming code for security purposes. 
• Ability to maintain confidentiality in carrying out duties and responsibilities.
• Ability to arrive on time, work hours as scheduled and maintain a good attendance record.