---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security System Administrator
Location: San Diego, California, United States
Type: Permanent P/T
Closing Date: 2006-05-15
Primary Purpose:
• Performs Computer Incident response team activities.
• Perform computer and network forensic examinations and investigations
in support of internal investigations and intrusion incidents.
• Provides service consultation and support towards information security
related projects and or solutions.
Responsibilities/Accountabilities:
• Incident Response responsibilities include, but are not limited to,
detection of incidents, containment, eradication, remediation, prevention and
prosecution. Individual will have a working relationship with all of IT
(especially the Forensics/Investigations team), Special Investigations Unit
headed by the Corporate Compliance Organization, HR, Legal and IT Audit.
Responsible for coordination with the VM team during CIRT incidents.
• Responsible for the process and procedures used in digital evidence
collection, acquisition, and storage.
• Responsible for the accurate and timely completion of case assignments.
• Participate in the design, implementation, maintenance and or
enhancement of the forensic lab and related technologies.
• Create and maintain forensic processes and procedures based on industry
best practices. Develop and maintain the necessary documentation to support
forensic and investigative process and procedures.
• Coordinate with internal support organizations in the development of
evidence collection methods, technologies, and processes that support detect
and respond to unauthorized or unintentional activities.
• Performs capacity and or requirements planning.
• Identify, evaluate and implement enterprise-wide log collection,
analysis, correlation, and incident response center, including the
identification of technology and strategic directions.
• Process and workflow improvement and development responsibility.
• Prepares tradeoff studies and evaluations for vendor products.
• Responsible for developing documented operational security
requirements, standards and procedures related to CIRT and the Sempra Energy
Forensic Team.
• Troubleshoots, maintains, upgrades, and provides solutions to complex
hardware / software problems and alerts management and other IT groups related
to improving the security posture of the Sempra Energy environment.
• Handles demands to solve complex problems aimed at delivering
consistent quality service to clients within predefined service levels; reviews
assigned service requests daily to anticipate future needs and provide a
picture of future service delivery demands and objectives.
• Assists in developing strategic and tactical planning of CIRT and
Forensic systems/services for internal customers, including discovery and
documentation of requirements.
• Demonstrated experience in effectively managing small to large projects
in a cross-functional environment.
JOB REQUIREMENTS
---------------------------------------------------
Skills/Competencies:
• Strong technical, operational expert that can implement technology that
enables business processes.
• Strong understanding of firewalls, IDS/IPS systems, event correlation
systems, content filters, SYSLOG, and SNMP.
• Good knowledge of data structures such as FAT, FAT32, FLASH, NTFS,
UNIX, etc., as well as working knowledge of OS, Anti-Virus, NIPS, Enterprise
Logging and event correlation.
• Understanding of current threats and exploits to include experience
with threat remediation.
• TCP/IP packet analysis experience.
• Application security experience with SQL injection, buffer overflows,
parameter manipulation, etc.
• Good judgment and analytical skills, strong follow-up and
organizational skills are paramount skills for the successful candidate.
• Ability to communicate technical information in understandable business
terms.
• Strong negotiation and persuasion skills.
• Ability to have good working relationships with outside vendors and
developing relationships with professional organizations, peer groups, and
industry trade groups and conferences to stay current with technology.
• Experience with EnCase forensic software and or similar technologies.
• Experience acting as a Computer Incident response lead in a large
complex environment.
• Excellent documentation skills.
• Knowledge of one or more risk assessment methodologies a plus.
Degrees/Certification/License/Experience:
• Bachelor’s degree in information security, computer science,
engineering, telecommunications, or related discipline.
• 4 years or more of related experience in Information Security
performing any of the following: vulnerability assessment/management, OS
hardening, Incident Response, Audit and Analysis, Forensic investigations, risk
assessment, penetration testing, etc.
• Security certifications such as CISSP, GIAC, Security+ desirable.
Operating system security or related training acceptable.
CONTACT
---------------------------------------------------
Interested Candidates, Please send us a cover letter with a copy of your resume
in Word (.doc) format.
Sempra Energy
Alexander Kunz
iprotect@sempra.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
