Security Analyst

Role : Security Analyst

Location: Pleasanton & Vacaville, CA

Duration: 12 Months

MOI : Telephonic & Skype

Primary Skills: Linux, Unix, ISO 27001/27002, PCI DSS v4, GLBA, HIPPA/HITECH, NIST 800-53, CIS CONTROLS, NIST CSF, CIS RAM, WINDOWS.

Need Candidates with a Minimum of 7 to 10 Years of Experience. This is an Onsite/Hybrid Model and W2 Position.

Job Description:

The tasks of the Security Analyst include, but are not limited to, the following:

• Proactively identify and assess threats to State Funds users, network and data
• Monitor and respond to reports of malicious activity
• Respond to and investigate intrusions and security events
• Demonstrate an understanding of the State Funds threat landscape
• Perform a thorough analysis of attacks and anomalous network behaviour
• Provide summarized and detailed analysis and documentation in support of ESEC
• Perform proficient forensic analysis using security tools and processes
• Identify Actionable Intelligence by processing Threat Intelligence (TI)
• Demonstrate ability to identify, contain, eradicate and recover from security incidents
• Collaborate with State Fund business units, partners and individuals to mitigate security threats
• Advise the CISO and ESEC Team on matters involving organizational, strategic, tactical, and security best practices related to forensics and security incidents management
• Attend meetings/Represent ESEC as a Senior Lead for all security matters
• Act as Lead/Co-Lead/Backup on assigned ESEC projects
• Mentor junior staff colleagues
• Create Standard Operating Procedures and training documents
• Other duties, to be assigned as needed

Technical Knowledge and Skills:

• Minimum of 5+ years of technical experience conducting security incident response and forensic analysis.
• Working experience in obtaining Cyber Threat Intelligence and making the information usable through the security incident process.
• Working experience in applying IOCs to identify threats in the current environment and apply information to prevent future vulnerabilities in infrastructure.
• Technical security project management skills.
• Work experience using best practices standards and frameworks: ISO 27001/27002, PCI DSS v4, GLBA, HIPPA/HITECH, NIST 800-53, CIS CONTROLS, NIST CSF, CIS RAM.

WORKING EXPERIENCE at a minimum:

• Hardware: Network Switches, Routers, Load Balancers, Servers, Storage Systems, End-User Systems, Mobile Devices, or other devices that enable the organization to complete its mission.
• Operating Systems: UNIX, LINUX, WINDOWS.
• Network: LAN WAN, Internet, Proxy/Filtering, Firewall, VPN, DMZ
• Network Protocols: TCP/IP, SNMP, SMTP, NTP, DNS, LDAP, NFS, SAMBA, etc.
• Databases: Oracle, SQL, MYSQL.
• Cloud Platforms: IAAS, PAAS, SAAS.
• Security Concepts: Encryption, Hardening, etc.
• Security GRC.
• Forensic Analysis Tools.
• Active Directory.
• Programming Languages are a plus.
• Computer Forensic experience is a plus.
• Prior SIEM experience is a plus.
• Malware analysis skills are a plus.

Professional Skills:

The Consultant resources(s) shall possess most of the following skills:

• Strong Analytical and Critical Thinking Skills
• Ability to analyze information and formulate solutions to problems.
• Provide more in-depth analysis with a high-level view of goals and end deliverables.
• Remain proactive and complete work within a reasonable time frame under the supervision of a manager or team lead.
• Plan and manage all aspects of the support function.
• Extensive knowledge and proven experience with information technology systems and methods of developing, testing and moving solutions to implementation.
• Expert knowledge in project management practices and ability to document processes and procedures as needed.
• Self-motivated self-starters/proactive, working closely and actively communicating with team members to accomplish time-critical tasks and deliverables.
• Ask questions and share information gained with other support team members, recording and documenting this knowledge.
• Elicit and gather user requirements and problem description information and record this information accurately.
• Listen carefully and act upon user requirements or requests.
• Convey and explain complex problems and solutions in an understandable language to technical and non-technical persons.
• Follow the lead of others on assigned projects as well as take the lead when deemed appropriate.
• Think creatively and critically, analyzing complex problems, weighing multiple solutions, and carefully selecting solutions appropriate to the business needs, project scope, and available resources.
• Take responsibility for the integrity of the solution.
• Present solutions (technical and non-technical) to management and decision-makers.
• Work collaboratively with other support team members and independently on assigned tasks and deliverables with minimum supervision.
• Experience in managing multiple projects.
• 5+ Years experience in information security and forensics and/or security incident response.
• CISSP and CCFP or equivalent certification desired (e.g., CCE, CHFI).
• Other highly desirable security certifications may be substituted for CISSP (e.g., CISA, CISM, etc.)

Core Competencies:

• Act with integrity
• Use sound judgement
• Commitment to Quality
• Demonstrate adaptability
• Innovate
• Think strategically
• Communicate effectively and influence others
• Work well both independently and as part of a team

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.