---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: New York, New York, United States
Type: Permanent F/T
Closing Date: 2007-07-05
Information Security Analyst (Incident Response & Event Management)
)
We're one of the largest self-administered labor-management Taft-Hartley funds
in the country with almost 200,000 members and half a million covered lives. If
you're ready for the brightest career future, join us in this excellent
opportunity to showcase your technical talents. We are currently seeking for an
experienced Information Security Analyst (Incident Response & Event Management)
for our Information Security division.
This position works closely with Information Technology Department to help in
the coordination effort to remediate security alerts and respond to information
security related incidents that could potentially impact the network, systems
and applications. Responsible for performing the daily tasks associated with
information security, incident response and handling, vulnerability handling
and security event monitoring. Work closely with Fraud, Legal and/or Human
Resources to facilitate general investigations. Assist in doing security risk
assessments to assess the integrity of network connections, projects,
applications or processes. This position will also work to implement the Funds
Information Security Policies & Standards.
Responsibilities:
• Design & implement a security event mgmt program including IT/IS
incidents to gather, store, correlate, analyze and respond to security data
from logs & incident reports
• Leading role in the Computer Security Incident Response Team (CSIRT)
process
• Perform forensic investigations of security incidents
• Conduct application security reviews to ensure proper security controls
are implemented
• Perform monitoring/auditing activities (e.g. monitoring access logs and
assigned privilege levels) and respond to security events as appropriate.
• Execute vulnerability tests on networks, systems and applications when
necessary.
• Perform regular scans and security assessments of the infrastructure,
notify/escalate with IT, and document findings in a complete comprehensive
report that includes technical and non-technical findings and recommendations.
• Mapping the security environment, and creating the procedures for
security tests
• Evaluate security infrastructure logs for anomalous and unknown
behavior
• Assist in security awareness training program
• Work with relevant personnel to evaluate new security technologies.
• Other duties as assigned
JOB REQUIREMENTS
---------------------------------------------------
• A bachelor’s degree from an accredited program is required.
• A minimum of three (3) years of experience in the areas of Information
Security and Information Technology.
• Knowledge of ISO 17799 and other leading security standards
• Firewall & Systems configuration and event log monitoring experience
required
• Incident Response experience required
• IDS, IPS, Log Correlation Systems configuration and monitoring
experience
• CISSP certification required
• SANS and other InfoSec related certification a plus
• Excellent troubleshooting and analytical thinking skills
• Good written and oral communications skills
• Excellent interpersonal and customer service skills
• Self-directed, self-motivated, self-starter able to work with minimal
supervision
We offer a competitive salary, an excellent fully employer-paid comprehensive
benefits package and talented professional colleagues. For consideration,
please apply on-line at www.1199nbf.org and click on the 1199SEIU NBF Jobs
link. Please mention you saw this ad in Security Focus. We are an Equal
Opportunity Employer.
CONTACT
---------------------------------------------------
1199SEIU Benefit and Pension Funds
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
