Candidate shall be an experienced, lead analyst possessing an in-depth understanding of a full spectrum of  network and computing technologies to work with lead system engineers in the formation and definition of a leading edge, 7X24 Security Operations Center (SOC). Once SOC is operational, candidate will serve as Tier 4 Analyst.  Responsibilities include conducting analytic studies and investigations; performing deep packet inspection and analysis of retrieved internet protocol payloads using various types of automated security systems; developing signatures and rules for pattern analysis and correlation of Intrusion Detection System (IDS) events in response to emerging threats; apprising customers and management with regard to current and emerging threats; documenting reports relevant to data analysis and SOC operations; and developing remediation and mitigation processes and procedures for lower tier levels where none currently exist.

 

The successful candidate should have at least 8 - 10 years experience in INFOSEC related field and possess strong proficiency in case managagment, defense-in-depth, and forensic analysis (flow, content, and packet analysis) enterprise security architecture, mobile code threats, mitigation techniques for known vulnerabilities, known exploitation methods, and experience with system attack methods (Botnets, DDOS, rootkits, etc) within enterprise networks.  Candidate must also be knowledgeable in network protocols (TCP, IP, ICMP, UDP), routers, networking applications and related protocols (e.g. SMTP, HTTP, HTTPS, FTP, etc), firewalls, VPNS, IDS, and UNIX/LINUX.  CISSP or related INFOSEC certification and an active TS/SCI with CI Polygraph is required. Effective oral communications/customer service skills and a professional attitude are a must.