Security Operations Engineer

Security Operations Engineer

Working in a dynamic environment with smart, fun people you will work on a variety of InfoSec technologies and have a wide range of duties to perform.

Some of the duties will include:

• Provide IDS monitoring, log analysis and incident response to information security alerts.
• Analyze log files, network traffic and IDS alerts to assess, prioritize and differentiate between potential intrusion attempts and false alarms.
• Launch and track investigations to resolution. Advise in the steps to take to investigate and resolve computer security incidents.
• Recommend IDS filters to eliminate false positives. In addition, daily reviews of IT security news postings reporting exploits in the wild and potential zero-day exploits.
• Perform highly complex analysis and technical tasks involving event detection and rapid response across various environments of the enterprise.
• Design, implement and support integration of information security solutions including security architectures, firewall administration, integrating security products, and developing and coordinating security implementation plans.
• Work with senior management to determine acceptable levels of risk for enterprise computing platforms and to discuss security implications of new information technology uses being considered.
• Investigate, document and report any actual or potential information security violation.
• Lead computer forensic analysis, cyber-crime investigation, incident emergency response and investigations.

Experience and skills should include:

• 2-5 years' experience working in 24×7 Security Operations Center (SOC) environment.
• Hands on Configuration experience with Security Incident and Event Management platform.
• Experience using: Splunk Enterprise Security, IDS, FireEye, Cisco Sourcefire, WAF Imperva.