Position : IT Security Analyst
Location : Richmond, VA
Duration : 6 Months
Position will be working with Information Security staff, with focus on networking and vulnerabilty management.
The scope of work is to provide a full-range of information security functions and skills with a detailed understanding of networking and vulnerability management.
FUNDAMENTAL REQUIREMENTS
Advanced working knowledge of and 12 or more years of professional experience working in Information Technology with a focus on Information Security from an operational perspective for more than 5 years
Thorough, in-depth knowledge of and experience with TCP/IP and networking as it relates to information security including firewall, router, load balancer, and other network infrastructure
Full understanding of Intrusion Detection and Prevention from both the network and host levels; ability to understand threat data and how to apply controls in this area
Full understanding of vulnerability scanning and analysis of outputs; ability to understand real from false positive observations by understanding the vulnerabilities as well as the network infrastructure
Previous experience performing penetration testing
Previous experience performing forensics and working on an incident management team
Full understanding of application level security and the associated vulnerabilities and controls
Meticulous attention to detail, excellent written and verbal communication skills, ability to handle multiple priorities and work both independently and in a team environment
RESPONSIBILITIES INCLUDE
Vulnerability scanning and analysis of outputs; work with Information Technology Division to securely remediate issue based on risk and prioritization
Monitor Intrusion Detection Systems and provide support for investigation or incident management
Define penetration testing criteria and lead testing efforts
Perform forensic analysis as needed
Define appropriate security controls for new and existing technologies
Assist in implementation of security tools as required
ENVIRONMENT
Microsoft Windows Server 2003, 2008, 2012
Microsoft Exchange Server 2010
Microsoft Office Professional 2010
Windows Active Directory, LDAP, WSUS
Cisco network and VPN equipment
VMWare
SAN, DASD, NAS
DS-3 Telecommunications, WAN, LAN, VLAN, SIP
Cisco VOIP
EMC Data Domain 2500, 4500 & Networker
Orion SolarWinds Monitoring
WSFTP & Move IT FTP Server
SOPHOS
QualysGuard
DESIRED QUALIFICATIONS
Information Security certification beneficial
For the more Information please contact me at 734-357-8988 or sathish dot balla at tekwissen dot com
Skills Required
- 12+ years professional IT experience with a focus on Information Security (operational)
- 5+ years experience in security operations
- Thorough knowledge of TCP/IP and network security (firewalls, routers, load balancers)
- Understanding of Intrusion Detection and Prevention at network and host levels
- Experience with vulnerability scanning and analysis (identifying true vs false positives)
- Previous experience performing penetration testing
- Previous experience performing forensics and incident management
- Understanding of application-level security vulnerabilities and controls
- Meticulous attention to detail, excellent written and verbal communication, ability to manage multiple priorities and work independently or in a team
- Information security certification (beneficial)
What We Do
STEM Xpert is a consulting engineering firm recognized in the engineering industry for its commitment to client service and passion for excellence. The firm provides specialized professional consulting services in the fields of science, technology, engineering, and mathematics (STEM).
