IT Security Analyst

Position : IT Security Analyst

Location : Richmond, VA

Duration : 6 Months

Position will be working with Information Security staff, with focus on networking and vulnerabilty management.

The scope of work is to provide a full-range of information security functions and skills with a detailed understanding of networking and vulnerability management.

FUNDAMENTAL REQUIREMENTS

• Advanced working knowledge of and 12 or more years of professional experience working in Information Technology with a focus on Information Security from an operational perspective for more than 5 years
• Thorough, in-depth knowledge of and experience with TCP/IP and networking as it relates to information security including firewall, router, load balancer, and other network infrastructure
• Full understanding of Intrusion Detection and Prevention from both the network and host levels; ability to understand threat data and how to apply controls in this area
• Full understanding of vulnerability scanning and analysis of outputs; ability to understand real from false positive observations by understanding the vulnerabilities as well as the network infrastructure
• Previous experience performing penetration testing
• Previous experience performing forensics and working on an incident management team
• Full understanding of application level security and the associated vulnerabilities and controls
• Meticulous attention to detail, excellent written and verbal communication skills, ability to handle multiple priorities and work both independently and in a team environment

RESPONSIBILITIES INCLUDE

• Vulnerability scanning and analysis of outputs; work with Information Technology Division to securely remediate issue based on risk and prioritization
• Monitor Intrusion Detection Systems and provide support for investigation or incident management
• Define penetration testing criteria and lead testing efforts
• Perform forensic analysis as needed
• Define appropriate security controls for new and existing technologies
• Assist in implementation of security tools as required

ENVIRONMENT

• Microsoft Windows Server 2003, 2008, 2012
• Microsoft Exchange Server 2010
• Microsoft Office Professional 2010
• Windows Active Directory, LDAP, WSUS
• Cisco network and VPN equipment
• VMWare
• SAN, DASD, NAS
• DS-3 Telecommunications, WAN, LAN, VLAN, SIP
• Cisco VOIP
• EMC Data Domain 2500, 4500 & Networker
• Orion SolarWinds Monitoring
• WSFTP & Move IT FTP Server
• SOPHOS
• QualysGuard

DESIRED QUALIFICATIONS

• Information Security certification beneficial

For the more Information please contact me at 734-357-8988 or sathish dot balla at tekwissen dot com