Network Security Analyst Job in East Rutherford, New Jersey US
Information/Network Security Analyst - East Rutherford, NJ
(9-6 pm and 3 pm-11pm shifts available Monday-Friday)
Challenges:
You will analyze a large volume of security event data from a variety of sources with the goal of identifying suspicious and malicious activity; perform post mortem analysis of traffic flows; perform case management throughout the incident life cycle; and complete projects and tasks associated with security monitoring, detection, and incident response on an as needed basis.
Responsibilities:
• Review and analyze SIEM security events from various monitoring and logging sources, as well as associated network traffic to identify and /or confirm suspicious activity.
• Research potential containment and eradiation techniques for analyzed security events in order to provide proper mitigation guidance to incident responders.
• Perform acquisition and basic to moderate static/behavioral analysis of malware specimens to determine the effects on internal systems at both the host and network level.
• Perform post-mortem analysis on traffic flows in accordance with current and emerging threat and attack vectors to identify and/or confirm malicious activity or compromise.
• Manage incident cases from inception to closure, which includes proper prioritization, assignment to incident response teams, and adherence to customer SLAs.
• Research, develop, and keep abreast of testing tools, techniques, and process improvements in support of security detection and analysis.
• Execute tasks or lead small projects as needed.
• Participate in customer and partner facing meetings and projects. •
Communicate and interact directly with other staff to ensure optimal individual and group performance.
• Maintain understanding of unit, department, and applicable Bank regulations, policies and procedures.
• Perform related duties as assigned or requested in compliance with ISO 9000 (International Standards Organization).
- knowledge of current security threats, techniques, and landscape. •
- conceptual understanding of SIEM technology as used by information security analysts.
• Knowledge of, and experience with, TCP/IP protocols and packet analysis.
• Knowledge of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.
• Working knowledge of Microsoft Office products, including Visio and Project.
• Good communication skills, analytical ability, strong judgment and leadership skills, and the ability to work effectively with clients and IT management and staffs.
• Ability to communicate technical issues to technical and non-technical business representatives on an as needed basis with direction from management.
• Ability to understand strategic objectives and vision, and work towards those goals • Dedicated and self driven desire to research current information security landscape
• Knowledge of Perl, Python, scripting, or other languages a PLUS.
• Knowledge of Linux and Microsoft Windows Server or other operating systems.
• Knowledge of databases or SQL a plus.
• Ability to obtain and maintain National Security Clearance.
• GIAC Certified Intrusion Analyst (GCIA) a Plus or hvaing demonstrated skills and ability to obtain this certification.
Will provide analysis and review of events and cases escalated from the live
monitoring team; perform post mortem review of traffic flows utilizing SIEM
system and other tools to detect malicious activity; and complete projects
and tasks associated with security monitoring, detection, and incident
response on an as needed basis.
Required Skills:
- Hands on experience in Cyber Security assessment (TCP/UDP traffic analysis
using tools i.e. WireShark, TCPDump, etc)
- Analyze and review escalated cases to further investigate suspicious
activity.
- Perform post mortem analysis on traffic flows and other activities to
identify malicious activity.
- Research, develop, and keep abreast of testing tools, techniques, and
process improvements in support of security event detection and analysis
- Execute tasks or lead small projects as needed
- Communicate and interact directly with other staff to ensure optimal
individual and group performance
- Perform related duties as assigned or requested in compliance with ISO
9000 (International Standards Organization)
Critical Skills:
- Must Have: Hands on experience in cyber security monitoring.
- Experience administering and troubleshooting Solaris, Linux, and Microsoft
Windows Server
- Thorough understanding of, and experience with, TCP/IP
- Understanding of networking concepts and infrastructure designs; including
routing, firewall functionality, host and network intrusion detection
systems, encryption, load balancing, and other network equipment and
protocols
- Working knowledge of Microsoft Office products, including Visio and
Project
- Excellent communication skills, analytical ability, strong judgment and
leadership skills, and the ability to work effectively with clients and IT
management and staffs
- Ability to communicate technical issues to technical and non-technical
business representatives
- Ability to understand strategic objectives and vision, and work towards
those goals
- Dedicated and self driven desire to research current information security
landscape
-