Job Description:

Role: Security Monitoring Analyst

Location: Holmdel, Nj/Remote

Client: Santander

Duration: 6 Month

Responsibilities:

Monitor for and detect security events from SIEM, Log collection Engines and other security technologies, such as Splunk

Perform investigations using various Monitoring Security technologies (i.e. IDS/IPS, DLP, etc.)

Review alerts escalated by end users

Perform initial triage of incoming issues (initially assessing the priority of the event, initial determination of event to determine risk and damage or appropriate routing of security or privacy data request)

Monitoring of health alerts and downstream dependencies

Provide limited response to end users for low complexity security events

Review and take a proactive approach to false positive and work with the various Security teams to tune and provide feedback to improve accuracy of the alerts.

Document, investigate and notifying appropriate contact for security events and response

Takes an active part in the resolution of events, even after they are escalated

Must participate in an on-call roster

Collaborate with technical teams for security incident remediation and communication

Conducts proof of concepts, vendor comparisons and recommend solutions in line with business requirements

Conducts security research on threats and remediation methods

Contributes to strategic planning to evaluate, deploy, or update security technologies

Creates process improvement by identifying inefficiencies and solutions for process improvements

Follows a standard methodology to identify and/or detect threats to the IT infrastructure, applications, and other information assets

Prepares system security reports by collecting, analyzing, and summarizing data and trends; presents reporting for management review

Promotes cross-department collaboration and communication to ensure appropriate processes, procedures and tools are installed, monitored, and effectively operating and alerting

Updates job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations

Requirements:

Ability to demonstrate understanding of Security investigations process and procedures

Experience writing correlation searches in Splunk ES

Ability to demonstrate technical experience working with enterprise security technologies like SIEM, antivirus/malware, IDS, WAF, DDoS mitigation platforms.

General network knowledge, TCP/IP, Internet Routing, UNIX / LINUX & Windows NT

Understanding of common network services (web, mail, DNS, authentication)

General Desktop OS and Server OS knowledge

Demonstrate ability to work with an Incident Management Tool (RSA Archer, ServiceNow).

Demonstrate excellent communication and organizational skills.

Demonstrate experience in windows/Unix scripting languages such as bash, python, regex, and power shell.

Preferred Training, Qualifications, and Certifications

Security+

CEH: Certified Ethical Hacker

SEC401: Security Essentials

SEC511: Continuous Monitoring and Security Operation

GCIA: GIAC Certified Intrusion Analyst

GCIH: GIAC Certified Incident Handler

Thanks and Regards,

Jatin Parkar| GVD Systems LLC

Technical Recruiter

Jatin.parkar@gvdsystem.com

757-750-5150

GVD Systems LLC

New Jobs

Security Monitoring Analyst