Title: Network Security Engineer
Location: Raleigh, NC
Duration: Long Term
Required Skills:
- Detailed understanding of the TCP/IP protocol suite
- System Administrator-level expertise in multi-user operating systems including Unix flavors and Microsoft Windows
- Demonstrated expertise in current modern security attacks and threats
- Demonstrated expertise in malware analysis, categorization, and attribution:
- Sandboxing technologies and products, commercial and open source
- Malware reverse-engineering and disassembly skills a plus
- Understanding of security incidents involving alternate OSs including Android and iOS
- Experience in scripting in one or more languages: shell, perl, python, or PHP
- Experience with virtualization technologies including VMWare, OpenStack, and other hypervisors
- General Cisco network security product and technology knowledge: Firewalls, Intrusion Prevention Systems, Web and Email Security
- Route and switch infrastructure
- Network security configuration and troubleshooting
- non-Cisco product and technology knowledge a plus
Responsibilities:
- Conduct in-depth investigations into security breaches using all available tools within Customer environment, Cisco, and online:
- Review device logs, full packet capture, and all forms of telemetry, interpret data
- Conduct online forensic investigations of devices (UNIX, Windows hosts and other platforms)
- Interview personnel to obtain information related to investigation
- Maintain up-to-date information in a secure case management system
- Identify, advise and implement incident mitigation actions, using the following tools:
- null routing, Firewall ACL changes, DNS RPZ
- Next-Generation IPS, Web Security and Email Security
- Endpoint and Network Advanced Malware Protection systems
- account disabling and application offlining
- Resolve cases escalated from Security Analysts (either as escalated ticket to customer· resolving as false positive.).
- Resolve cases dispatched from Customers, maintain daily dialog with Customer on case until resolved
- Effect resolution by driving coordination across infrastructure, law enforcement, human resources, legal, and lines of business
- Vigilantly protect Customer data, ensuring proper handling and protection electronically, physically, and verbally Ensure assigned shift is covered personally or attended by an alternate Investigator
- Share incidents and intelligence via conference presentations, intelligence exchanges, informal mailing lists, and social media
- Mentor Analysts in investigative skills and customer communications
- Maintain quality assurance for all processes
- Conduct threat research to determine how Clients are affected by threats
All your information will be kept confidential according to EEO guidelines.
