Job Description

Position Overview The Security Operations Analyst role will be responsible for the coordination and support of the organization\'s global security monitoring and response program. This position will require hands on technical skills as an escalation point for SOC analysts as well as provide support of various security platforms and tools. Essential Duties & Responsibilities Responsible for the operation of tools to identify, prevent, contain or mitigate technical security risks that exist in the RL IT Infrastructure. Assist in developing, maintaining and supporting security related process and procedures for the Security Operations Center (SOC). Assist in managing various security programs such as employee Phishing Training and Awareness programs. Experience in the use of a variety of security tools, including (not limited to): EDR Antivirus Network Firewall/Host Based Firewall/Web Application Firewall Intrusion detection/prevention Data Loss Prevention Encryption tools Network sniffers and packet data collectors Web Proxy/URL filtering Security Incident and Event Management Vulnerability scanners Sandboxing Digital cyber forensic and eDiscovery tools File Integrity Monitoring Desired: Experience with advanced forensic and security analytic tools Experience with performing forensic investigations and participation in eDiscovery activities Cyber-crime related law enforcement experience Experience, Skills & Knowledge 3-5+ years of Network and/or Host Security experience. Strong expertise in security configuration of various operating systems, including all relevant versions of Microsoft and Apple OS\'s. Strong expertise in log data analysis Strong expertise in data extraction and parsing scripting (shell, pearl, macros, excel, etc.) Strong expertise in the use of host security configuration assessment tools (ex: Policy Auditor, ESM, etc) Strong expertise in conducting digital forensics investigations Strong written and verbal communication skills Proven system problem solving skills and experience resolving complex business issues Strong knowledge in network security architecture Experience working with risk tracking tools Preferred Certifications or Other Professional Credentials: CISM, CISA, GIAC/GCFA

foundit