Sr Contract Security Analyst

Job Description Seeking a Sr Security Analyst Consultant to lead staff in the implementation and execution of technical aspects of the client’s enterprise security plan. The candidate will serve as the SME on security issues and projects so that ESEC team members can increase their security knowledge. Duration: 12 months Job type: Contract position Location: Pleasanton or Vacaville (onsite for the first week, onsite as needed thereafter) Duties / Responsibilities Provide the highest quality services in the shortest timeframe possible with effective and efficient knowledge transfer to client employees. Act as a self-starter who can come up to speed in domain knowledge quickly. Proactively identify and assess threats to client users, network, and data. Monitor and respond to reports of malicious activity; investigate intrusions and security events, demonstrating an understanding of the client threat landscape. Perform thorough analysis of attacks and anomalous network behavior; provide summarized and detailed analysis and documentation in support of ESEC. Perform proficient forensic analysis using security tools and processes. Identify actionable intelligence by processing threat intelligence (TI). Identify, contain, eradicate, and recover from security incidents. Collaborate with client business units, partners, and individuals to mitigate security threats. Advise the CISO and ESEC team on organizational, strategic, tactical, and security best practices related to forensics and incident management. Attend meetings and represent ESEC as a senior lead for all security matters. Act as lead, co-lead, or backup on assigned ESEC projects. Mentor junior staff colleagues. Create SOPs and training documents. Other duties, as assigned. Technical Stack Experience Hardware: Network Switches, Routers, Load Balancers, Servers, Storage Systems, End-User Systems, Mobile Devices, or other devices that enable the organization to complete its mission.

OS: UNIX, LINUX, WINDOWS.

Network: LAN, WAN, Internet, Proxy/Filtering, Firewall, VPN, DMZ. Network protocols: TCP/IP, SNMP, SMTP, NTP, DNS, LDAP, NFS, SAMBA, etc. Databases: Oracle, SQL, MySQL. Cloud Platforms: IAAS, PAAS, SAAS. Security concepts: Encryption, Hardening, etc. Security GRC. Forensic analysis tools. AD. Programming languages a plus. Computer forensics experience a plus. Prior SIEM experience a plus. Malware analysis skills a plus. Experience At least 10 years of overall enterprise information security experience. At least 5 years of technical experience conducting security incident response and forensic analysis. At least 5 years of Cyber Threat Intelligence experience and making the information usable through the security incident process. Experience applying IOCs to identify threats in the current environment and applying information to prevent future vulnerabilities in the infrastructure technology security. Experience using best practices, standards, and frameworks: ISO 27001/27002; PCI DSS v4, GLBA; HIPAA/HITECH; NIST 800-53; CIS Controls, NIST CSF; CIS RAM. #J-18808-Ljbffr 6AM City, LLC