Network Security Engineer

Description

JOB DETAILS Responsible for the daily IT security operational aspects of website, cloud, network security incidents and activities. working with Client and providing remediation & recommendation . Dealing with daily IT Security mitigation, whitelisting, SIEM alerts, falsepositive analysis and investigation of abnormal traffic patterns impacting our Cloud, Network, websites and mobile applications.
5 years+ experience & knowledge of a variety of security technologies (e.g., SIEM, IDS / IPS, Firewall, Proxies, AntiVirus).
Monitors SIEM and logging environments for security events and alerts to potential (or active) threats, intrusions, and/or compromises
Responsible for understanding the global threat landscape through working with Target Cyber Threat Intel team to maintain awareness
Experience with network monitoring in a SOC environment desired
Familiarity with cybersecurity issues and incident response techniques.
Escalates cyber security events according to Targets Cyber Security Incident Response Plan
Acts as a Lead during Cyber Hunt activities at the direction of one or more Target Incident Handlers
Documents event analysis and writes comprehensive reports of incident investigations
Responsible for publishing regular report/dashboard of security environment.
Experience with one or more scripting languages such as Perl, Python and PowerShell.
Must be processed and detailed oriented and possess good documentation, written and verbal communication skills.
Excellent problemsolving skills with the ability to diagnose/troubleshoot technical issues.
Familiarity with network security, basic routing principles and networking fundamentals, and wellknown protocols and services (e.g. FTP, SSH, SMB, LDAP).
Security certifications (e.g. Security+, GCIA, GCIH, CISSP, CEH, etc.)
Experience with ArcSight/Splunk/FireEye or other security products desired
Experience managing cases with enterprise SIEM or Incident Management systems
Experience supporting network investigations, Malware Analysis, DDOS and Cloud Protection.