---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: Highlands Ranch, Colorado, US
Type: Contract
Closing Date: 04/25/2005
Summary:
This position is responsible for performing the daily tasks associated with
information security, incident response, vulnerability handling and security
event monitoring within the Global Security Operations Center.
Essential Functions:
·Research, specification, and development of processes and techniques to
improve security monitoring and vulnerability remediation techniques to support
publication, secure communication and interaction with customers and vendors.
·Implementation and communication of new vulnerability remediation
strategies for use by Managed Security Services team.
·Writing short to medium-length procedural documents describing security
monitoring, incident response/handling and vulnerability mitigation/remediation
strategies.
·Interaction and communication with customers, vendors and vulnerability
researchers.
·Triage of incident/vulnerability reports and initial scope
determination of incident/vulnerability reports.
·Testing of exploit scripts, patches, etc.
·Be on call to respond to Internet emergencies (outside of normal
business hours).
Experience:
Expert knowledge of the following topics:
·Security Event Management (SEM/SIM)
·System and/or Network Security Administration
·Extracting security information from network monitoring
tools/applications
·Operational proficiency of multiple security tools (firewalls, IDS/IPS,
VPN, vulnerability scanners, AV, etc.)
·Incident and Intrusion Response/Handling
·Common Vulnerabilities
Additionally, in-depth knowledge or familiarity with most or all of the
following topics
·Analyzing large volumes of IDS, Firewalls, Proxies and network data
·Core Internet protocols (TCP/IP, UDP, DNS, SMTP, SNMP, etc.).
·Internet routing protocols and security issues related to Internet
routing
·Detailed knowledge of methods used by intruders to attack systems and
networks
·Collecting, summarizing, and analyzing Internet traffic and incident
data for security trends.
·Working knowledge of LANs, WANs, VPNs, routers, firewalls, security
devices and network devices.
JOB REQUIREMENTS
---------------------------------------------------
Qualifications:
·BS in Computer Science, Information Science, Information Technology
candidates with a BS degree in non-technical fields with equivalent experience
will be considered as well.
·Candidate must be able to pass a background investigation, be eligible
to obtain a United States DoD Secret clearance, and must be a U.S. citizen.
·CISSP, CISA, GSEC will be a plus
·Ability to work well independently with little supervision and
prioritize work
·Must have excellent verbal and written communication skills
·Excellent analytical and problem-solving skills
·Mentoring/training skills
·Ability to develop and explain technical decisions
·Resolve important technical issues
·Work within a closely coordinated team during emergencies
·Recognize and deal appropriately with confidential and sensitive
information
·Work calmly and well under pressure
Additional Information:
Some business travel required. Computer hardware installation and configuration
required on a regular basis. Evening/weekend hours may be required in order to
perform service outside of normal operating hours. Candidate must be able to
respond to outage events in a reasonable time.
CONTACT
---------------------------------------------------
Ibase Consulting
jcho@ibaseconsulting.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
