Security Engineer - Threat Detection

Description

Required Skills 3+ years experience in the Information Security field, including operational security monitoring experienceMonitoring devices such as network and hostbased intrusion detection systems, web application firewalls, database security monitoring systems, firewalls/routers/switches, proxy servers, antivirus systems, file integrity monitoring tools, and operating system logs.The ability to build strong relationships with peers both internal and external to your functional group, and with peers/professional organizations outside your company.Experience managing intrusion detection systems (such as Suricata or Sourcefire), including initial provisioning, software patching/upgrades and signature creation/tuning.Ability to write custom intrusion detection system rules.Experience configuring security incident and event management tools (such as LogRhythm, Symantec SIM, LogLogic), including creating event filtering and correlation rules and reports.Strong technical understanding of network fundamentals and common Internet protocols.Strong technical understanding of the information security threat landscape (attack vectors and tools, best practices for securing systems and networks, etc.).Familiarity with Microsoft Windows and Linux/Unix system administration and security controls.Must have strong verbal and written communication skills; ability to communicate effectively and clearly to both technical and nontechnical staff.