Job Details

Email to Friend Save Back

Lead Security Analyst

NEW YORK-10009, NY, US
11/15/2018

-

Required Skills

Scripting, Linux

Company

Infinity Consulting Solutions, Inc

Experience

5 to 10 Year(s)

Job Description

The candidate will lead the ongoing Security Operation efforts and implement solutions that improve the overall security posture of the firm.

The individual will work closely with other members of the IT Security engineering team to actively identify and rank security risks, recommend and implement solutions, work with affected departments to address the risk, and ensure that the remedy remains in effect.

They must combine hands-on experience with an understanding of theory and practice.

The candidate's responsibilities include operational aspects of monitoring and remediating security events including working with vendors and other IT departments to address the event and escalating to senior members of the team as necessary.

Major Responsibilities:

Operational

Lead a small team of analysts and be the Point of contact between the internal team and outsourced SOC.

Perform day to day administration and support of security infrastructure tools and systems, including but not limited to SIEM, IDS/IPS, Anti-Virus, Anti-Malware, DLP, or other Network or System Monitoring tools

Review security logs of critical systems to identify risks, security threats, or configuration errors

Review daily, weekly, and monthly security reports for any anomalies or issues

Provide first level support on security issues and guidelines from end-users, developers, desktop-support specialists and system administrators

Troubleshoot security issues and assist with security incident responses and forensic investigations

Maintain documentation on security architecture, procedures, configuration
Project based work

Implement well engineered solutions to improve security posture

Work with colleagues and vendors to assess different technologies and determine their impact within the environment

Provide technical support to design, develop, engineer and implement security requirements for new and existing hardware, networks, and applications

Prepare formal and informal reports with security requirements on security incidents, system vulnerabilities, and ongoing compliance functions

Perform web application and web services security assessments, including reporting of vulnerabilities and working with development teams to correct or mitigate found vulnerabilities

Required Qualifications:

Previous lead experience is a plus

Strong communication skills. Ability to clearly articulate ideas, solutions, etc.

Self-driven to learn and develop skills

Strong educational background with BS / MS in Computer Science, Engineering, or related area

Knowledge of internet, web, application, and network security techniques

Knowledge of Linux, Windows, and Virtualization security

Understanding of security logging, audit logging, and event logging

Understanding of TCP/IP, Routing, Switching, Firewalls, and other Network functionality

Good analytical and problem solving skills to troubleshoot and resolve security issues

Ability to be organized and very detailed oriented

Ability to perform and interpret vulnerability assessments

Ability to administer the operations of a security infrastructure

Ability to balance and prioritize work

5-10+ years of experience in a similar position

Additional Optional Qualifications:

Scripting knowledge preferred

Experience working within the Financial Services industry