Flexion Inc

Flexion is seeking an Information Security Consultant for our direct clients' needs. This role is 100% remote. Description: 1. Support Cyber Risk function performing a review of exceptions and vendor assessments using a tool called Cyber GRX. 2. Support Cyber Compliance with assisting the team in performing risk assessments / interviews, assist with data gathering/evidence and assist as needed with any report writing. Summary: Support Divisional Technology Services and business stakeholders on security compliance, risk and audit strategies to manage identified risks and ensure remediation and mitigation plans are adopted and adhere to security policies, standards and best practices. Often working as a team member on larger initiatives, or delivering smaller initiatives under guidance, this role will perform security compliance and risk assessments and other compliance, risk and audit advisory services as required to meet divisional regulatory driven compliance requirements and policy adherence. Primary Responsibilities * Contribute to development of a globally consistent Security Compliance and Risk consultancy and advisory practice, including maintenance of relevant processes and templates * Assist with Technology services, Enterprise Risk, Legal and Group Audit in effectively managing technology risks and develop timely and effective remediation and mitigation plans * Assists in the delivery of security and risk assessment for 3rd Party IT vendors and service providers * Develop awareness of divisional technology security, risk and compliance strategies, audit support processes and remediation planning strategies that align with security effort to achieve regulatory and policy compliance * Respond to security compliance, risk and audit questions and inquiries, utilizing available resources and procedures, adhering to the risk framework and policies * Apply globally consistent security policy, standards, patterns, and engagement process(es) to triage and review business risk and level of security effort required to mitigate risks and reach compliance * Engage the Enterprise Risk team to self-report issues and inform business and project stakeholders of potential security issues from internal sources and 3rd party IT vendors. Responsible for following up on identified issues to achieve resolution through design amendment, compensating controls, or risk acceptance * Prepare reports on vendor assessment and vendor risks * Enhance awareness of security risk and compliance within business stakeholder and divisional IT community * Build effective relationships with business stakeholders and IT teams to deliver security risk and compliance consulting services that meet stakeholder expectations * Maintain high standards of service delivery to enable continuous improvement and effective response to stakeholder feedback * Support the delivery of Security compliance and Risk Consultancy services ensuring compliance with appropriate SLAs and quality controls and alignment with security, regulatory and business requirements * Track security compliance and risk service benefit to specifically identify areas of continuous improvement of service delivery * Actively undertake personal development to ensure up to date knowledge and skills * Support others in the team where appropriate to assist in the achievement of their objectives Preferred Competencies/Skills * Flexible and able to apply skills to all types of technology solutions. * Analytical and problem-solving skills. * Sound communication skills, with developing ability to communicate technical information to business users. * Sound customer service focus. Preferred Knowledge * Understanding of information security risk and compliance and familiarity with current trends/developments. * Understanding of secure SDLC processes and Project Management Methodologies. * Understanding of business and technical information security concepts e.g. risk management, standards, BCM, penetration testing and training awareness. * Some knowledge of current regulatory environment (NYDFS, APRA, GDPR, PCI, other national, state and local regulations) * Broad and high-level knowledge of infrastructure and application technologies. High level knowledge of control standards (COBIT, NIST etc.) * Research and understand emerging regulatory changes, cyber security threats and risk drivers relevant to divisional business. Equal Employment Opportunity/Affirmative Action Employer - provided by Dice

Flexion Inc. a Madison, WI based IT Consulting and Services firm is looking for an Operations Technologist to work on a long-term consulting project. The client for this position is based in Madison, WI. The most efficient way to reach our recruiting team is to submit your resume through the URL provided. If you have questions or would like more information about this job posting, or if would like to know more about Flexion Inc. please contact Sally Harris at Looking for a candidate with a minimum of 5 years of experience: Infrastructure Trend and Forecast Reporting - Current State Capacity Planning provides historical trending information and reporting for key production systems. This involves a request and identification of the system (i.e. JBoss Pillars, Oracle Servers, Mainframe). Forecasting is done based on the analysis of the historical data and knowledge of expected changes Pull historical performance data and throughput metrics for each system from summary tables Graph key performance metrics and identify growth trends Investigate reasons for growth steady or stair step. Cross reference changes from change calendar and throughput metrics to understand the growth Write trend report / forecast and send for team review Send report to infrastructure manager and team that requested the analysis and meet with them to review the report Infrastructure Trend and Forecast Reporting - Future State Capacity Planning is implementing new features of the Performance Software. These new features (TSCO) will allow for automated trending and forecasting of any system or Infrastructure however it is defined. It will also allow us to correlate Business Volume metrics (i.e. Page Hits, Policy Quotes, Claims) with resource consumption. Identify all touch points in the System or Infrastructure and create a domain Identify any and all business volume metrics and add to the domain Begin creating analysis and scenarios for TSCO reporting Schedule the reporting Notify interested parties Application Rollout Reporting and Forecasting - current state This reporting has been done in the past for APEX and is in progress for Policy Center. Capacity Planning works with the development team to understand the rollout plan and to continually analyze performance and throughput metrics as new users are added. In addition, observed/measured changes in resource consumption and remaining user counts are used to generate a forecast. This is an iterative and manual process currently correlating OS metrics, with response time metrics, throughput, and ==== activity. Identify all touch points and the rollout schedule Build a spread sheet for all metrics available and begin loading history if available for all touch points. Update daily analyzing changes in performance with respect to load and additional users Once enough historical data has been collected and at least two groups of users have been added, calculate the impact on a per user basis and begin calculating the impact for future users Write a report and send to the team involved in the rollout periodically updating this report. Application Rollout Reporting and Forecasting - Future state Capacity Planning will be able to leverage new functionality to automate this forecasting and to automatically correlate new users to changes in throughput and resource consumption Identify all touch points and the rollout schedule Build the appropriate domain in TSCO Identify any and all business volume metrics and add to the domain Begin creating analysis and scenarios for TSCO reporting Schedule the reporting Notify interested parties Hardware Sizing Capacity Planning can provide input for the impact of new hardware when replacing existing/older hardware. Modeling is completed by taking existing OS metrics and within the Predict tool modifying the existing hardware to match potential replacement hardware. This is done by using input from benchmarking done by SPEC. This can also include modeling of combining workloads from different systems onto one new system. Identify hardware for replacement, review historical and current resource consumption, and create an analysis for peak volume Once the analysis is complete and peak time frame is identified, open the analysis up in Predict for modeling. Within Predict modify the current hardware to each potential replacement and save new models for each potential replacement. Evaluate each model and note the performance change Apply noted performance changes to historical and/or current performance data and graph the predicted impact of each possible hardware choice write report and send to requestor Production Performance Troubleshooting When there are production performance issues, Capacity Planning frequently will be called on to review performance metrics for the production systems involved to assist focus of troubleshooting efforts Read listen and understand the performance issues reported and ideas for where to begin analysis (includes known recent changes and triggered alerts if any) Review real-time performance metrics for the application/service experiencing performance issues with Investigate (OS Metrics) and DYNATRACE metrics for response time, throughput, and ==== activity Compare resource consumption and load of previous same weekdays and times with DYNATRACE and BEST/1. Identify downstream services/databases for same evaluation Report findings as Evaluated Production Performance Windows / Linux / ESX Troubleshooting Ad-hoc Windows, Linux or ESX performance requests to troubleshoot a Pre-Prod or Production performance problem Read, listen and understand the performance issues reported and ideas for where to begin analysis (includes known recent changes and triggered alerts if any) Review OS or application performance bottlenecks, measuring CPU, IO, process-level characteristics or disk latencies observed on the backend infrastructure Compare resource consumption and load of previous same weekdays and times with BEST/1 data. Identify consumed endpoints - SQL, Oracle, proprietary interconnects for any issues. Report findings as Evaluated Application Performance Assessment This service involves working with development and test teams to design, execute, and analyze application performance tests. There should be a minimum of 2 test executions for each different load level for best results. Meet with test and development teams to discuss the application, changes for the release, and completing the Application Profile Template for Capacity Planning Verify Performance data collection for all touch points (including Dynatrace being enabled) Pull production volume metrics if they exist and provide those metrics to the Test Team Lead (Page Hits, Dynatrace Response times, and/or ESB requests) Upon successful completion of each performance test verify success rate in DevTest Reports, OS metrics, ESB Hits / Apache web hits, Apache memory requestors, and review Dynatrace metrics and ==== activity. Upon validation of a successful test, process performance data and analyze resource consumption, response times, page hits, and service calls for all touch points. This includes comparisons to previous test results as well as production metrics Write Application Performance assessment and send for team review Meet with tester and development team to go over the analysis Send Analysis to test lead and development team and meet with them to discuss the findings Cloud Cost and Performance Optimization This service involves working with IT Finance, Cloud Platform Engineering and Cloud account owners to assess current utilization and spend. Make recommendations to optimize performance and reduce cost. Right size AWS EC2 instances and S3 buckets appropriate to workloads and storage needs Trend cloud spend Trend cloud application performance Equal Employment Opportunity/Affirmative Action Employer - provided by Dice

API Programmer / Monitoring Engineer What the job looks like: This is a long-term contract hybrid development/application monitoring engineer position for our well-known Insurance client. Flexion is a direct vendor of this client for over 10 years. The position is fully remote until COVID restrictions are lifted. This is 100% REMOTE job with some on-site travel (1-3 times a year) to Madison, WI for large releases. The Application Monitoring Engineer is responsible for delivering and supporting large-scale network, system, application, service, and business activity monitoring solutions. This position involves the deployment and support of the tools the company uses to monitor their network, systems, and applications. This individual will work with senior members of the team to gather monitoring requirements from stakeholders and deliver solutions utilizing the enterprise monitoring toolset. The hybrid aspect of this will be that this position will focus on the use of API calls into and out of our current monitoring solutions. These may be written in Python or Java. Understanding of ServiceNow development and workflow creating/editing would be a huge plus. Understanding of Cloud Formation and YAML another huge plus. The primary duties are: This position is responsible for delivering and supporting enterprise-level monitoring for subnets, systems, applications, service, and business activities via the heavy use of development skills. As part of the Availability Management team, this position will be involved in crafting and implementing the Monitoring Strategy and tools usage documentation for monitoring. This individual will work with senior members to gather monitoring requirements from stakeholders and deliver solutions utilizing the enterprise monitoring toolset (AWS, Dynatrace, Splunk, ELK, and others). Job Responsibilities: Support application monitoring for .Net, Java, SaaS, AWS, and other application architectures via the use of API calls Understand the differences between PaaS, IaaS, and SaaS and best practices for the monitoring of each Understand log analytics monitoring with ELK and/or Splunk Provide deep visibility into on-prem, cloud, and hybrid applications performance Support the efforts for ongoing Dynatrace AppMon Configurations and Dynatrace platform implementation via the API Implement application monitoring, synthetic and real user monitoring solutions following best practices across the enterprise Collaborate with Business and Technology to design and implement performance benchmarks for each application, and report results periodically Develop processes to monitor and alert for critical business transactions and applications to catch an issue before the impact Participates in the discussion of applications performance and infrastructure outage incidents to provide solutions Collaborate with all relevant IT resources to develop preventive measures and automated remediation of production issues Develop automated remediation workflows (ServiceNow, API, etc) Participate in continuous improvement initiatives to enhance client service, efficiency and Required Skills: Strong Experience Python, Java, or other programming languages to develop APIs 4 or more years of experience in Information Systems performing application and infrastructure analysis Strong web application development experience. Strong Service coding/message framework experience (SOAP / REST) Strong Experience with Dynatrace, Splunk, ELK, and other industry-standard monitoring platforms Working knowledge of application monitoring best practices Experience with multiple hardware and operating systems such as Unix, Linux, Windows, and/or VMware, EC2, ECS, Containers, and Lambda functionality Experience with application performance management technologies: server and application (real and synthetic) monitoring components Strong Experience in integrating Dynatrace with ServiceNow, Splunk, and other industry-standard platforms Synthetic monitoring tools including browser-based testing and load generators Infrastructure monitoring tools: client, server, network, logs Understanding of core development principles of scripting languages like Perl, Java, and Python Understanding of middleware technologies such as JBoss and Tomcat Understanding or relational and non-relational databases (Oracle, MySQL, NoSQL, etc) Experience in configuration management and orchestration tools Experience in configuration, release, and change management Self-driven individual with good project and time management skills Strong analytical and problem-solving skills Ability to prioritize and deliver on multiple project deadlines and milestones Ability to work effectively with a diverse set of clients in an international organization Strong attention to detail and follow-through Must be an effective communicator (written and verbal) Willing to learn new things At Flexion, we live by these principles: Speak openly and honestly with your colleagues and clients about problems and proposed solutions Welcome and handle changing requirements and priorities with little or no warning Collaborate online in small groups about 50% of the time Encourage simple and minimal solutions that keep options open Expect and vocally advocate for quality first Learn new practices and techniques as the situation demands Ensure the teams develop demonstrable software every week or two Do what needs to be done to deliver the product or project without ego or attitude Dig deep to find the root causes of problems so we can create the right solutions Relentlessly improve yourself, your team, and your processes The most efficient way to reach our recruiting team is to submit your resume through the URL provided. If you have further questions then please contact Uzair Qasim at T. / C . Equal Employment Opportunity/Affirmative Action Employer If you require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us atfor assistance. - provided by Dice