MIS Software Application Developer/Analyst - II
Security Analysts are expected to handle day-to-day tasks involving SOC (CSIRT) monitoring, incident analysis and investigation, and provide recommendations for remediation as well as short-notice ad hoc work, and see them through to completion with minimal supervision. Security Analysts provide critical value to the SIEM management service, leveraging extensive knowledge to provide context to events. Security Analysts provide recommendations for remediation actions and suggestions for implementing best practices and improving standard processes and procedures. This position requires occasional weekend work. Duties: �Active real-time security monitoring �Security event detection, triage and threat analysis for complex and/or escalated security events �Provide log/network/malware/device analysis and making recommendations for remediation of security vulnerability conditions �Develop internal and/or external documentation, such as detailed procedures, playbooks, and operational metrics reports �Coordinate with SIEM Architects and/or Shift Lead for high priority incidents Required Experience, Education, and Skills: �Must have experience in a security monitoring/incident handling position �Clear and concise written and oral English, including the ability to create technical and procedural documentation �Strong communication skills and ability to engage with customers to understand their requirements �Capability to effectively multi-task, prioritize work, and handle competing interests �Proactive in following up on customer issues �TCP/IP networking skills to perform packet and log analysis �Experience with multiple attack vectors such as Malware, Trojans, Exploit Kits, Ransomware and Phishing techniques �Unix/Linux command line experience Preferred Skills: �Linux, Perl, Python scripting �SANS or other Security industry certifications such as GIAC, GSEC, GCIA, GCIH, GREM, GPEN or OSCP �College Degree preferred �Hands-on experience with SIEM platforms, such as RSA Security Analytics, Splunk, or ArcSight; also Firewalls, Intrusion Detection/Prevention Systems (Snort, Bro, Mcafee IPS, Sourcefire), Proxies, WAF (Imperva, f5 ASM), FireEye and/or Pen Testing �May also perform QA functions to ensure quality ticketing practices across the team
Vivek Salvatore
vivek.salvatore(@)americanetworks.com
(973) 582-3458