Security Analyst

Our client in California is seeking a Security Analyst to join their team on a long-term contract.

The tasks for the Security Analyst include, but are not limited to, the following:

• Proactively identify and assess threats to State Funds users, network and data
• Monitor and respond to reports of malicious activity
• Respond and investigate intrusions and security events
• Demonstrate an understanding of State Funds threat landscape
• Perform thorough analysis of attacks and anomalous network behavior
• Provide summarized and detailed analysis and documentation in support of ESEC
• Perform proficient forensic analysis using security tools and processes
• Identify Actionable Intelligence by processing Threat Intelligence (TI)
• Demonstrate ability to identify, contain, eradicate and recover from security incidents
• Collaborate with State Fund business units, partners and individuals to mitigate security threats
• Advise the CISO and ESEC Team on matters involving organizational, strategic, tactical, and security best practices related to forensics and security incidents management
• Attend meetings/Represent ESEC as a Senior Lead for all security matters
• Act as Lead/Co-Lead/Backup on assigned ESEC projects
• Mentor junior staff colleagues
• Create Standard Operating Procedures and training documents
• Other duties, to be assigned as needed

Technical Knowledge and Skills:

• Minimum of 5+ years of technical experience conducting security incident response and forensic analysis.
• Working experience of obtaining Cyber Threat Intelligence and making the information usable through the security incident process.
• Working experience of applying IOCs to identify threats in current environment and apply information to prevent future vulnerabilities in infrastructure.
• Technical security project management skills.
• Working experience using best practices standards and frameworks: ISO 27001/27002; PCI DSS v4, GLBA; HIPPA/HITECH; NIST 800-53; CIS CONTROLS, NIST CSF; CIS RAM.

• WORKING EXPERIENCE, at a minimum:
  • Hardware: Network Switches, Routers, Load Balancers, Servers, Storage Systems, End-User Systems, Mobile Devices, or other devices that enable the organization to complete its mission.
  • Operating Systems: UNIX, LINUX, WINDOWS.
  • Network: LAN WAN, Internet, Proxy/Filtering, Firewall, VPN, DMZ
  • Network Protocols: TCP/IP, SNMP, SMTP, NTP, DNS, LDAP, NFS, SAMBA, etc.
  • Databases: Oracle, SQL, MYSQL.
  • Cloud Platforms: IAAS, PAAS, SAAS.
  • Security Concepts: Encryption, Hardening, etc.
  • Security GRC.
  • Forensic Analysis Tools.
  • Active Directory.
  • Programming Languages are a plus.
  • Computer Forensic experience a plus.
  • Prior SIEM experience a plus.
  • Malware analysis skills a plus.

Professional Skills:

The Consultant resources(s) shall possess most of the following skills:

• Strong Analytical and Critical Thinking Skills
• Ability to analyze information and formulate solutions to problems.
• Provide more in-depth analysis with a high-level view of goals and end deliverables.
• Remain proactive and complete work within a reasonable time frame under the supervision of a manager or team lead.
• Plan and manage all aspects of the support function.
• Extensive knowledge of and proven experience with information technology systems and methods of developing, testing and moving solutions to implementation.
• Expert knowledge in project management practices and ability to document process and procedures as needed.
• Self-motivated self-starters/proactive, working closely and actively communicating with team members to accomplish time critical tasks and deliverables.
• Ask questions and share information gained with other support team members, recording and documenting this knowledge.
• Elicit and gather user requirements and/or problem description information, and record this information accurately.
• Listen carefully and act upon user requirements or requests.
• Convey and explain complex problems and solutions in an understandable language to both technical and non-technical persons.
• Follow the lead of others on assigned projects as well as take the lead when deemed appropriate.
• Think creatively and critically, analyzing complex problems, weighing multiple solutions, and carefully selecting solutions appropriate to the business needs, project scope, and available resources.
• Take responsibility for the integrity of the solution.
• Present solutions (technical and non-technical) to management and decision makers.
• Work collaboratively with other support team members and independently on assigned tasks and deliverables with minimum supervision.
• Experience in managing multiple projects.
• 5+ Years experience in information security and forensics and/or security incident response.
• CISSP and CCFP or equivalent certification desired (e.g., CCE, CHFI). Other highly desirable security certifications may be substituted for CISSP (e.g., CISA, CISM, etc.)

Core Competencies:

• Act with integrity
• Use sound judgement
• Commitment to quality
• Demonstrate adaptability
• Innovate
• Think strategically
• Communicate effectively and influence others
• Work well both independently and as part of a team

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.