Sr. Security Analyst, Leesburg

[brad.birch]

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Sr. Security Analyst
Location:       Leesburg, Virginia, United States
Type:           Permanent F/T

Closing Date:   2008-12-19

Sr. CSIRT Analyst (457)

Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. DOD Secret clearance is required and must be clearable to Top Secret.

• Must be willing to work in a 24/7/365 security operations center working either a fixed 10 or 12 hour shift. Must also be willing to work holidays and at least one weekend day/night per shift.
• Must understand hacker motives, means, and methodologies
• Must understand common vulnerabilities and exploits of Windows, Linux/Unix systems, and common applications
• Must understand Windows Active Directory and associated services and common vulnerabilities
• Should have had previous system administration experience with Windows, Unix/Linux systems and peripherals
• Must have a strong understanding of TCP/IP networking and at least a basic to mid-level understanding of routing, switching, routing protocols, VPN concentrators, gateways, and proxies – previous experience and/or certification in network engineering strongly preferred
• Should have experience with Security Information Management Tools (ArcSight, netForensics, e-Security, GuardedNet )– ArcSight experience is strongly preferred
• Must have experience with enterprise anti-viral solutions – McAfee is strongly preferred
• Should have experience with enterprise content filtering, anti-malware/spyware solutions
• Must have experience with firewalls such as Checkpoint, Cisco PIX/ASA, Sidewinder
• Must have experience with vulnerability scanning tools such as Foundstone, Nessus, Nmap, Retna, nCircle – Foundstone and Nessus experience is very strongly preferred
• Should have knowledge of and experience in cyber intelligence gathering techniques, such as hacker web sites, open and closed source threat centers such as US-CERT, JTF-GNO, SANS, Internet Storm Centers, etc.
• Should have experience writing IDS/IPS signatures – experience with Snort and one or more of the following is strongly preferred: Cisco, ISS, NFR, Sourcefire, Intrusheild
• Should have experience in malcode investigation – malcode reverse engineering experience strongly preferred
• CISSP, SANS/GIAC, other security industry certifications strongly preferred
• Foreign language skills (read/speak) strongly preferred – especially Asian, Middle-Eastern, European/Eastern European languages


JOB REQUIREMENTS
---------------------------------------------------
• Bachelor's degree in Computer Science or Information systems.
• Minimum four years of relevant professional experience is considered equivalent to a Bachelor’s degree.

In addition to required education or equivalent experience:
• Minimum six years IT experience.
• Must have had experience with network and host-based intrusion detection/prevention systems such as Cisco, ISS, Snort, eTrust, NFR, Intrushield – two or more of these are strongly preferred.
• Must have prior experience with analysis at the packet level using tools such as TCPDump, Ethereal, WireShark.
• Must have experience in security analysis, incident response, or computer network defense in a large enterprise environment.
• Must have three years experience administering Windows and/or UNIX-based systems and at least five to six years network security analysis, using intrusion detection systems.
• For Watch Officers: MUST have experience with leading security investigations, with customer interfacing, report preparation, documentation, configuration change control, conducting briefings to both technical and non-technical staff, and in preparing shift reports.


CONTACT
---------------------------------------------------


Knowledge Consulting Group
Brad Birch
Contract Recruiter
brad.birch@...



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs