Job Details

Email to Friend Save Back

Security Analyst

ATLANTA-30312, GA, US
08/09/2019

-

Required Skills

Scripting

Company

Infinity Consulting Solutions, Inc

Experience

2 to 4 Year(s)

Job Description

SECURITY ANALYST

An established financial institution is actively seeking an experienced Security Analyst to join their global information security team. You will be part of the information security assurance group driving security improvement through continuous assessment of the company's threat landscape. The ideal Security Analyst will have a background either as part of a Red Team, Blue Team or as a Penetration Tester. Looking for someone very detail oriented and thorough in their security approach and research. Excellent written and verbal communication is required.

Responsibilities

Red Teaming: models atomic and scenario-based red team testing ranging from social engineering and phishing through control evasion and 0-day exploit development. Leverages and refines the condensed kill chain framework, Mitre Telecommunication&CK, and internally-developed priorities to probe weaknesses and identify opportunities for improvement. Evaluates and manages a wide array of third-party red team vendors to conduct frequent (monthly) on and off-site advanced threat and insider emulation campaigns across worldwide offices.

Threat Automation: creates, develops and manages projects and products that continuously simulate new and emerging security threats and threat actors. Writes, validates and augments tools to support our evolving security requirements, use cases and organizational threat goals. Evaluates and implements software with scalability and repeatability in mind, ensuring that security controls are accurate and measurable.

Red Team Intelligence: plans, develops and manages unique red team projects to support strategic information security goals. Gains deep insight into infrastructure, applications, business, operational and personnel processes to accurately inform on security risks and vulnerabilities. Emulates and applies real world threat intelligence and attacker techniques to effectively test organizational security. Stays informed, and tenaciously pursues applicable attack paths.

Documenting and effectively publishing technology guidance and repeatable processes

Mentoring peers in groups and individually

Improving processes and introducing superior technology

Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other groups and offices

Qualifications

2+ years of Information Security experience

University degree in Computer Science, Engineering, MIS, CIS, or related discipline

Previous experience working on a Red Team or Blue Team

Previous experience doing penetration testing

Scripting, software engineering, and system administration preferred

Offensive Security Certified Professional (OSCP) qualification helpful