XOR Security

<h3>Job Description:</h3>
XOR Security is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards
Location:
Washington D.C., USA
Schedule:
6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Washington

Mid Level SOC Analyst

EMW, Inc.

Deadline Date: Tuesday 16 August 2022 Requirement: Security Firewall Engineer Location: Mons, BE Full time on-site: Yes NATO Grade: A/97 Total Scope of the request (hours): 570 Required Start Date: 12 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Specific Working Conditions: The work will be executed on site at the NCI Agency offices in Mons, Belgium, in a normal office environment with standard working hours. Exceptionally there might be requirements to perform out-of-hours work to support planned maintenance activities or delivery of critical services. Duties and Role: Under the direction of Section Head, Gateway Security Services, the Secuirty Firewall Engineer will perform duties such as, but not limited to, the following: <ul> <li>Support the Centralised SLA and project activities in all areas of network and security devices, such as<ul> <li>Central administration of Boundary Protection and Gateway services</li> <li>System staging and configuration</li> <li>Firewall policy development</li> </ul> </li> <li>Management, maintenance and configuration of appliances and software applications for Gateway Security systems, including network security devices such as firewalls and data diodes to ensure continuing functionality and availability.</li> <li>Provide technical support in troubleshooting infrastructure and operational issues and collaborating with other teams for a successful resolution;</li> <li>Perform the analysis, design, implementation and maintenance of authorised changes, related to Gateway Security Systems and the integration/tailoring of vendor supplied components, following established procedures for quality, configuration control, testing, documentation and security;</li> <li>Collaborate with the Infrastructure Management and other Cyber Security teams</li> <li>Provide assistance to Incident Handlers to identify and remediate security incidents</li> <li>Review security documentation and provide technical advice, when requested</li> <li>Perform other duties as may be required.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments</li> <li>Firewall installation and management of other vendors</li> <li>Other Boundaries Protections Devices such as mail gateways or data diodes</li> <li>Computer and Networks Security principles, procedures and technologies.</li> <li>Wide and local area networks and components (switches, routers)</li> <li>LAN/WAN networking including protocol network architecture, and the vulnerabilities of modern operating systems and applications</li> <li>Troubleshooting TCP/IP networks, Linux and/or Windows infrastructures to identify problems</li> <li>TCP/IP protocols and services </li> <li>UNIX and Microsoft Operating system </li> <li>Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams</li> </ul>In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas: <ul> <li>Deploying Palo Alto Network Threat Prevention on Enterprise level.</li> <li>Scripting (Python, Shell scripting, PowerShell).</li> <li>Understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)</li> <li>Previous work in an international environment comprising both military and civilian elements.</li> <li>Possession of Industry leading certification in the area of Cybersecurity such as CISSP, CISM, MCSE/S, CISA, GSNA, SANS GIAC.</li> </ul>

Mons

C002331 Security Firewall Engineer (NS) - TUE 16 Aug

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The CyberSecurity Analyst is a trusted technical advisor working with an active Center of Excellence. The CS Analyst works closely with the client to provide proactive support assistance to reduce or prevent security issues from occurring on the client network.  The CS Analyst will administer and maintain security measures focused on application, web and infrastructure security for the client. The CS Analyst is responsible for working with key client contacts at multiple levels of the organization to identify and align business and IT Security objectives.  The CS Analyst will provide security analytics and assistance with security support requests. 
<h3>Responsibilities:</h3>
<ul>
<li>Monitor, respond to, and analyze SIEM alerts from monitoring tools. </li><li>Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products.  Handles daily incidents; monitors, tracks, analyzes and records. </li><li>Work with vendors, outside consultants, and other third parties to improve information security within the organization. </li><li>Responds to security related tickets escalated from clients, and works collaboratively with the client to assist in resolving security events. </li><li>Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware. </li><li>Monitor security vulnerability information from vendors and third parties. </li><li>Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables. </li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner. </li><li>CISSP, CISA or GIAC certification is a plus. </li><li>A minimum of 2-4 years of experience working with Microsoft Active Directory. </li><li>Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred. </li><li>Analyze and resolve complex technical and business problems. </li><li>Must have proficient knowledge with three or more of the following technologies:  Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX &amp; Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware </li><li>Knowledge with NIST, FISMA, DIACAP. </li><li>Knowledge of Windows 2003-12 server platforms. </li><li>Knowledge of VMware and VM server platforms. </li><li>Knowledge of UNIX server platforms. </li><li>Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows. </li><li>Web and mail logged events. </li><li>Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports). </li><li>Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns. </li><li>Ability to troubleshoot Windows Event IDs. </li><li>Interact with all levels of management. </li><li>Make decisions based on many variables. </li><li>Manage multiple tasks/projects simultaneously. </li><li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience. </li><li>Advanced network and systems certifications such as CCNP, CCNA and CISSP, are preferred. </li><li>Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint are a plus. </li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Knoxville

CyberSecurity Analyst, Cyber Fusion Team, MSS | Knoxville, TN

Core10

100% RemoteCore10 is in search of a Network Security Engineer to join our mission-critical team. This position will involve implementing firewall changes and troubleshooting firewall issues for the various business units within our enterprise environment and for our customers. The majority of the daily work will involve working tickets out of the two main help desk ticket systems as well as installation, upgrades, and decommissioning of firewall equipment. Core10 is a rapidly growing, full-service tech company headquartered in Nashville, TN. We specialize in software development, API integration and SaaS implementation and customer success services to the best financial services and Fintech organizations in the United States. We are also an industry leader with our banking platform, Accrue: a digital lending and account opening platform for community banks, credit unions, Fintechs, and consumers. What You'll Do:<ul> <li>Researches, recommends and implements changes to enhance systems security.</li> <li>Designs and builds various network monitoring systems and tools.</li> <li>Provides assistance to less experienced team members.</li> <li>Responds to alerts and security related issues. </li> <li>Performs incident response and handles escalated cases; identifies unauthorized access to systems; may inventory computers for unauthorized programs and policy violations.</li> <li>Provides moderately complex troubleshooting and customer support regarding security related issues. </li> <li>Configures firewall rules for both internal and external customers</li> <li>Conducts life-cycle management of firewalls within the environment</li> <li>Ensures documentation for all firewall rules are completed in accordance to internal policies and other industry regulations.</li> </ul>RequirementsQualifications &amp; Experience:<ul> <li>Must have 4 years of experience in network technology, firewall, and/or information security in a large enterprise environment.</li> <li>Networking and/or security industry-standard certifications.<ul> <li>Extensive Cisco NGFW (Next-Gen Firewall) experience</li> <li>Cisco CDO (Cisco Defense Orchestrator) experience</li> <li>Extensive Cisco IPS Firepower experience</li> <li>Moderate level of understanding on networking including routers</li> </ul> Bonus Points: <ul> <ul><li>Banking or Fintech experience</li></ul> <ul><li>Cloud Firewall (GCP, Azure, AWS) experience </li></ul> </ul> </li> </ul>Benefits<ul> <li>Work From Home (100% remote!)</li> <li>Health Care Plan (Medical, Dental &amp; Vision) for employee (a significant portion of employee only paid) and family (paid in part)</li> <li>Collaborative culture: virtual &amp; optional in-person events, retreats &amp; swag </li> <li>Training &amp; Development<ul> <li>Individual Training Budget</li> <li>Technical Book Club &amp; other study groups</li> <li>Certifications are encouraged with bonuses</li> <li>Mentoring Program with bi-weekly 1:1s</li> <li>Up-to-date technologies, tools and methodologies</li> </ul> </li> <li>Parental Leave (Maternity &amp; Paternity)</li> <li>Flexible PTO plan</li> <li>Retirement Plan (401k)</li> </ul>Core 10, Inc. does not discriminate in employment matters on the basis of race, color, religion, gender, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, or any other protected class. We support workplace diversity.

United States

Network Security Engineer

Rackspace

The Information Security Engineer will create and maintain customer loyalty by providing Fanatical Support above and beyond customer expectations.  JOB REQUIREMENTS: Key Accountabilities ·        Provide exceptional customer support via the phone, email and ticketing system·        Own level-appropriate customer requests and issues, seeing them through to resolution·        Escalate support requests to next-level engineers and other support teams according to escalation procedures·        Schedule and coordinate level-appropriate maintenances·        Communicate with Account Managers and Business Development Consultants to build strong customer relationships·        Collaborate and share knowledge with other Engineers ·        Review and adhere to defined policy and process standards Key Performance Indicators  ·        Documentation creation and contribution·        Ticket Contribution and Phone Availability: Working as a team to serve our customers, helping the overall team hit their targets while maintaining individual targets. ·        Customer rating on work done via tickets·        Exceptional ticketing standards·        High level of first pass yield maintenances  PERSON SPECIFICATION:  Level-appropriate knowledge of and/or professional experience with:            The Information Security Engineer has an intermediate knowledge of:·        Security concepts, principals and technologies·        Configuration and support of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) (Alert Logic, Firepower)·        Efficiently handle and respond to customer IDS alert tickets·        Execute vulnerability scans, review results, and provide guidance with internal teams on how to remediate (Alert Logic, Rapid7)·        Configuration, investigation, and analysis of Web Application Firewall (WAF) blocked events (Imperva WAF, Incapsula)·        Knowledge of common web security vulnerabilities and recommended remediation·        Configuration and support of Log Management tools (Alert Logic)·        Configuration and support of Two-Factor Authentication tools (Duo Security, RSA)·        Configuration and support of Anti-Virus tools (ESET, Sophos)·        Configuration and support of File Integrity Monitoring tools (FIM)·        Configuration and support of Database Encryption and Key Management tools (Vormetric)·        Minor configuration of Firewalls appliances (Cisco ASA/ASA-X/Firepower, Juniper SRX)·        Minor configuration of Load Balancers appliances (F5 LTM, Citrix Netscaler)·        Knowledge of IPSEC and SSL VPN technologies·        Troubleshoot network connectivity using industry standard packet capture tools·        Services and protocols commonly used in hosting environments: web servers, database servers, mail servers, name servers·        Networking concepts and devices (All OSI Layers)·        Windows and Linux operating system administration·        Understanding of public cloud security architectures, best practices, and services·        Provide guidance on different deployment strategies ·        Maintain up-to-date vendor related roadmaps and scheduled releases·        Execute device firmware upgrades across various platforms based on security requirements / feature updates The ideal candidate possesses:·        A minimum of two years’ experience in a related field·        A computer-related degree and/or relevant network, security, or system administration certifications·        Excellent written and verbal communication skills (fluency in multiple languages is a plus)·        Must be able to work weekends, after hour shifts and/or holidays when required as the business needsAny combination of the following technical certifications is preferred:·        CCNA (R&amp;S, Security, or CyberOps) certifications ·        Any SANS GIAC certifications·        RHCE or equivalent for Linux administration ·        MCSA or equivalent for Windows administrationAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

R-14115 Information Security Engineer II

Apply to Firewall Cyber Security Jobs in companies remotely and near you. New Firewall Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
C002331 Security Firewall Engineer (NS) - TUE 16 Aug at EMW, Inc.	CISM Full Time Contract Windows CIA
CyberSecurity Analyst, Cyber Fusion Team, MSS \| Knoxville, TN at Avertium	Full Time Analyst Contract Windows Active Directory
Network Security Engineer at Core10	Remote Full Time Incident Response AWS Azure
R-14115 Information Security Engineer II at Rackspace	Remote Full Time Windows Citrix Cloud

Firewall Cyber Security Jobs

0 Firewall Cyber Security Jobs. Page 1 of 1

5 closed firewall cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Firewall Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Firewall Cyber Security Jobs

0 Firewall Cyber Security Jobs. Page 1 of 1

5 closed firewall cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Firewall Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter