Zwift

Seniority Level: Mid-Senior
Location:  Remote (select US States)
About the role and about You:
At Zwift IT, we are constantly improving our security practice and enforcing our security policy. Currently, we are looking for a Sr. Information Security Operations Analyst to join our Information Security team.  We are looking for a candidate who possesses deep expertise in the security threat monitoring, detection, and incident response space, especially in a hosted cloud/web operations environment. The Sr. Information Security Operations Analyst will be a part of Zwift’s information security team intended to protect and safeguard our information assets, keeping our computer systems and network devices hardened against attacks and data breaches. The chosen candidate will be capable of adapting to a fast-paced environment and be ready to address shifting priorities as needed. The selected candidate will demonstrate creativity and out-of-the-box thinking to continuously improve the organization’s threat intelligence, security monitoring, detection, and response capabilities.
Successful Engineers at Zwift are self-starters, able to work autonomously, natural problem solvers, collaborative, and comfortable navigating ambiguity. You should have strong problem-solving skills, excellent interpersonal skills, a deep technical understanding of information security operation infrastructure, and the desire to be an individual contributor to securing Zwift assets.

What you’ll do:
<ul>
<li>Provide subject matter expertise in security threat analysis, hunting, detection, and response across Zwift’s Production and Corporate IT environments</li>
<li>Perform analysis, correlation of actionable security events and alerts, and network traffic analysis using raw packet data, net flow, IDS/IPS, SIEM, and/or any custom sensor output as it pertains to security threat intelligence, analytics, and visibility</li>
<li>Participate in the Security Incident Response Team (SIRT) activities, helping SIRT to detect, respond, contain, eradicate and recover from security incidents in a timely manner, within the Cloud Operations and Corporate IT environments</li>
<li>Develop and maintain the incident response framework consisting of Incident Response Plans and Procedures in the form of run books, for the most relevant incident types</li>
<li>Ability to investigate and understand threat campaign(s) techniques, lateral movements, and indicators of compromise (IOCs).</li>
<li>Interface with external entities including law enforcement organizations, intelligence community organizations, and other government agencies as required.</li>
<li>Willingness to be on call and work odd hours when required</li>
</ul>
What you'll have: 
<ul>
<li>Bachelor’s degree in Computer Science, Information Systems, or related technical field</li>
<li>5+ years of previous experience working in security operations, hunt teams, threat intelligence, or incident response</li>
<li>Public Cloud experience required</li>
<li>3+ years of experience working with multiple security technologies including IDS/IPS, SIEM, Log Analysis (Windows, Linux, Web Servers, FIM, NextGen Firewalls, NextGen AV, WAFs, etc.), Network and User Behavior Analysis tools, and Network Packet Analyzers and Visibility tools</li>
<li>3+ years of experience leading cyber security incident resolution as an Incident Response Engineer or Analyst in an Enterprise environment</li>
<li>Knowledge of the Incident Response lifecycle, working independently to investigate and effectively respond to cyber security incidents, working with Digital Forensics tools in an Enterprise environment</li>
<li>Advanced Knowledge of the TCP / IP protocol suite, security architecture, securing  and hardening Operating Systems, Networks, Databases, and Applications Experience developing and maintaining operations playbooks, run books, and the IR plans</li>
<li>Prior experience employing forensic tools and techniques for attack reconstruction, including forensic analysis and volatile data collection and analysis, will be an added advantage</li>
<li>Thorough understanding of the  threat and attack landscape, latest security trends, attack vectors, vulnerabilities, and how they are leveraged by malicious actors</li>
<li>Excellent verbal and written communication skills and ability to document and explain technical details and incident reports clearly and concisely</li>
</ul>
Bonus points:
<ul>
<li>Comfortable in an AWS environment</li>
<li>CISSP, GSEC, GCFA, GCIH, CHFI,  SEC+. CEH, or other Cyber Security related certifications</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.
Transparency in Coverage: 
Health plan price transparency is designed to help consumers know the cost of covered items or healthcare-related services prior to the date upon which they receive care. Transparency in Coverage (TIC) regulations require health insurers and group health plans to create machine readable files (MRFs) that contain the negotiated rates for in-network providers and allowed amounts derived from historical claims for out-of-network providers and make those files publicly available.
Here is the <a href="https://healthy.kaiserpermanente.org/front-door/machine-readable" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Kaiser Permanente posts its in-network and out-of-network allowed amount machine-readable files (MRFs).
Here is the <a href="https://www.anthem.com/ca/machine-readable-file/search" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Anthem posts  its in-network and out-of-network allowed amount machine-readable files (MRFs). The link will allow you to search for your files using your Employer Identification Number (81-2798595)

Long Beach

Sr. Information Security Operations Analyst

Gainsight

Gainsight is a venture-backed, fast-growing tech company revolutionizing Customer Success for businesses. The Customer Success company helps businesses grow faster by reducing churn, increasing upsell, and driving customer advocacy. Gainsight provides a complete, end-to-end Customer Success solution through its services and technology. The industry-leading platform helps companies manage customer relationships effectively, track customer health, and transform the way organizations orient around the customer. Gainsight is the platform of choice for many leading companies like Box, Adobe, and Workday. The company has been recognized as one of the top 100 private cloud companies in the world by Forbes, one of the fastest-growing private companies in America by Inc. Magazine, and as one of 20 Great Workplaces in Tech by Fortune Magazine. Gainsight’s CEO, Nick Mehta, has been recognized as one of the Top SaaS CEOs in America. The company has offices in California, Phoenix, St. Louis, London, and India.
About The Job Role
The Senior Information Security Analyst will drive the Product security track of world-class products for Gainsight, a growing Software as a Service innovator which takes Security seriously.  This role will own the security posture of features being developed across the technology stack. This role is key to security since it encompasses activities such as code review, architecture/design reviews, testing vulnerabilities, threat modeling, technology/third-party library risks, liaising with Engineering on secure design patterns, and consulting with product teams on remediation patterns.  The role takes pride in driving product security across Engineering by closely interacting with the Architecture Council and Security world. This role will report to the Product Security Manager and is based out of Hyderabad, India.
What You’ll Do Here
<ul>
<li>Perform secure design and/or code reviews for vulnerabilities. </li>
<li>Understand product in and out for finding design, functional, and technical security vulnerabilities.</li>
<li>Champion application security paradigms and help implement remediations.</li>
<li>Review scan results and advise appropriate remediations.</li>
<li>Perform code release reviews for new changes being introduced for vulnerabilities.</li>
<li>Understand and keep in sync with evolving production cloud configuration, application configuration, technology standards, and frameworks.  </li>
<li>Use industry-leading tools for validating application security issues, and drive adoption of those tools.</li>
<li>Enable production releases of Gainsight’s industry-leading SaaS product by reviewing releases, with coaching, for security issues and signing off on releases as appropriate.  </li>
<li>Lead projects on defense side of Product security by using top design patterns </li>
<li>Consult with the Product organization spread across several teams for secure product development, review of their security concerns/remediation.</li>
<li>Improve DevSecOps posture by incrementally automating and adopting seamless functions on SAST and DAST within CICD  by working with release teams.</li>
<li>Drive and advocate security culture with Engineering and own product security functions.</li>
</ul>
What We’re Looking For
<ul>
<li>5-8 years of hands-on experience in Product security functions.</li>
<li>Minimum 2-3 years of hands-on experience in coding or product development across any technology stack.</li>
<li>Solid expertise in application security including OWASP Top 10 and appropriate processes for signing off releases/features using industry known appsec tools.  </li>
<li>Hands-on experience performing Vulnerability Assessment on applications and cloud infrastructure by clearly understanding the business and threat landscape across the industry.  </li>
<li>Demonstrated expertise in identifying security vulnerabilities using leading tools either using SAST, DAST or IAST.</li>
<li>Experience in leading projects impacting entire product breadth is a key requirement.</li>
<li>Understanding of cloud and network security analysis tools, penetration testing, firewalls, VPCs, VPNs is desirable.</li>
<li>At least one industry certification: GSEC, CompTia Security+, CISSP, ECSA or OSCP.  </li>
<li>Nice to have skills: AWS Cloud security, TOGAF or Java Certified Professional.</li>
</ul>
Why You’ll Love It Here
<ul>
<li>Our Attitude: We’ve created a new industry from scratch, and we’re on the fast track!</li>
</ul>
<ul>
<li>Our Leadership: We offer the leading tech solution for driving Customer Success.</li>
</ul>
<ul>
<li>Our ROI: Reduce customer churn, increase up-sell, and improve customer satisfaction.</li>
</ul>
<ul>
<li>Our Technology: Deep Salesforce.com hooks, predictive analytics, and highly scalable product with a beautiful user interface.</li>
</ul>
<ul>
<li>Our Impact: We help our customers make millions of dollars more per year.</li>
</ul>
<ul>
<li>Our Clients: Big companies like Box, Adobe, Marketo, and many others.</li>
</ul>
<ul>
<li>Our Team: Tech all-stars from Facebook, Box, and others (and top consulting firms like BCG and McKinsey!).</li>
</ul>
<ul>
<li>Our Values: They are unique - Golden Rule, Success for All, Childlike Joy, Shoshin, and Stay Thirsty, My Friends.</li>
<li>Our Office: If you showed up one day, you might find anything from karaoke performances to mini-golf championships.</li>
</ul>
Here are our 5 core values:
<ul>
<li>Golden Rule: We believe in trusting each other, and our community by exercising reliability.</li>
</ul>
<ul>
<li>Success for All: We believe that success for our stakeholders comes with making a difference in each other’s lives. </li>
</ul>
<ul>
<li>Child-like Joy: We aspire to experience passion, optimism, and laughter in everything we do.</li>
</ul>
<ul>
<li>Shoshin: We believe in a beginner’s mind, and that learning comes from everywhere.</li>
</ul>
<ul>
<li>Stay Thirsty, My Friends: We believe in an internally-driven strive for greatness.  </li>
</ul>
Individuals seeking employment at Gainsight are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.

Hyderabad

Senior Information Security Analyst

WPP is the transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.
Working at WPP means being part of a global network of more than 100,000 accomplished people in 110 countries. We create transformative ideas and outcomes for its clients through an integrated offer of communications, experience, commerce, and technology. WPP and our award-winning agencies work with most of the world's biggest companies and organisations – from Ford, Unilever and P&amp;G to Google, HSBC, and the UN. Our clients include 61 of the FTSE 100, 325 of the Fortune Global 500, all 30 of the Dow Jones 30 and 62 of the NASDAQ 100.
WPP has headquarters in New York, London and Singapore and a corporate presence in major markets worldwide. We are quoted on the London Stock Exchange and the New York Stock Exchange. Key performance indicators for WPP (2020) include Billings of £46.9bn and Revenue of £12bn.

<a href="https://www.linkedin.com/company/wpp/" rel="noopener noreferrer nofollow ugc" target="_blank">Visit our LinkedIn page to see what we're up to!</a>

Why we're hiring:
WPP IT provides IT services for WPP, group owned operating companies and agencies. The WPP group is the world’s largest communications services group, and as a creative transformation company, WPP is helping its clients transform the future through extraordinary work.  WPP IT is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands.
As part of the organisational design initiative at WPP the Group CIO has created a new Target Operating Model (T.O.M), which consist of 4 distinct businesses in the group. These are: Integrated Creative, Media, Production, PR and Specialist – commonly termed as archetypes. S&amp;H is one of these  new archetypes in the WPP group with a mandate for providing common solutions, platforms and services for Production, PR &amp; Specialist Agencies and WPP Corporate Functions. 
Specialist &amp; Hogarth (S&amp;H) Archetype
The S&amp;H archetype together with WPP IT are the technology solutions partner for WPP Corporate Functions, Production, PR &amp; Specialist Agencies and are accountable for co-ordinating and assuring end-to-end change delivery, managing the IT technology life-cycle and innovation pipeline.
Operation Assurance 
The Operation Assurance (OA) team in the S&amp;H archetype is responsible for ensuring safe and secure IT operations, protecting our customers, employees, and shareholders, whilst making sure we remain compliant with our legal, regulatory, and contractual obligations.  As an IT Security Lead, you will play a critical role in developing and implementing a world class IT security programme to protect operating companies and agencies in the S&amp;H archetype from cyber threats. Working closely with the WPP CSO organisation, WPP IT Security, and the OA department head you will assist in setting the vision and strategy for the OA function and be responsible for escalations relating to IT security operations, security assessments, incident response, and security advisory in all aspect information technology (i.e., hardware, software, compute, storage, network, DB, virtualisation, on-prem &amp; cloud technologies, project work, new business partnerships and M&amp;A). As a subject-matter-expert you will be responsible for managing and developing a highly effective security function that strengthens our defences and creates a proactive and collaborative approach to IT Security and IT Security risk management.
You will operate in a highly complex environment with multiple risk categories, including IT operations, information security, legal, regulatory, financial and commercial with broad impacts spanning both the S&amp;H Archetype and the WPP Group.
You’ll have a deep understanding of the information security standards, frameworks, and methodologies we can use to strengthen our security posture.  You will work across all OpCo’s and agencies part of the S&amp;H archetype to implement agreed processes and practices mandated by WPP CSO organisation and WPP IT Security function.
You will have good understanding of managing security engineering lifecycles (from requirements analysis through to acceptance and early life support, and disposal.) Understanding of different lifecycles/methodologies (waterfall, incremental, agile, DevOps) would be beneficial, as embedding security from inception in all aspect of information technology will prevent security afterthoughts in designing and developing business critical IT solutions and services.  
You’ll be able to actively manage live security risk issues from an issue resolution and communication standpoint and be able to prioritise remediation to minimise impact to the S&amp;H archetype and the WPP group.

What you'll be doing:
<ul>
<li>Work closely with and assist OA department head in developing an IT Security strategy for the S&amp;H archetype that is aligned to WPP CSO and WPP IT strategies.</li>
<li>Establish IT security community across the range of S&amp;H agencies to drive the implementation and standardisation of agreed security governance and controls </li>
<li>Support IT security operations and design, providing critical Specialist and Hogarth Archetype context support and input to security assessments – including the consumption of security architecture, addressing security vulnerabilities, penetration testing and internal ethical hacking services</li>
<li>Work closely with the IT Ops and CSO security teams to deal with security issues in the S&amp;H archetype</li>
<li>Ensure the knowledge, capability, capacity and readiness across the Specialist and Hogarth Archetype to identify the security requirements, to apply the appropriate security activities within their ‘patch’ and to respond/ escalate security threats and vulnerabilities.</li>
<li>Drive the archetype’s IT security strategy and approach, by working with S&amp;H Archetype’s Operations Assurance Lead, Strategy &amp; Architecture and other IT stakeholders in the WPP Group</li>
<li>Actively support archetype’s BCP, DR and Resiliency planning initiatives and assist Rick &amp; Compliance Lead with technical security operations knowledge</li>
<li>Provide technical subject-matter-expertise in internal and external security assessments of BAU activities, projects, vendors, business partners and client contracts</li>
<li>Be S&amp;H point of contact for relevant business stakeholder escalations relating to IT security operations. Lead and oversee resolution of the most complex, critical, and impactful security events and incidents in relation to information security</li>
<li>Work across the S&amp;H Archetype teams like Risk &amp; Compliance, Global Technology Services, Digital Workplace and Strategy and Architecture to design controls, deliver management information (KPIs) and security oversight using intelligent tools and dashboards   </li>
<li>Drive engagement, comms and adoption for all IT security initiatives to ensure the rationale for task is understood, the mandate is embedded, and colleagues and partners are trained and can perform effectively and efficiently.</li>
<li>Build strong relationships with the external stakeholders (customer, suppliers, other major bodies) as well as build a network of peers to bring innovation and insights on industry best practice, standards, frameworks, and processes to deliver a future-fit capability</li>
<li>Ensure that S&amp;H archetype remains safe and secure by advising all stakeholders to engineer services and solutions that are in line with WPP Security Charter and industry best practice</li>
<li>Support OpCo’s and Agencies in the S&amp;H Archetype during client pitch for winning new work by providing a compelling narrative to our prospective clients around the strength of our security posture</li>
<li>Be responsible more managing a team of security analyst to support business functions in EMEA, AMER &amp; APAC regions.</li>
</ul>
What you'll need:
<ul>
<li>Security Management Certifications (i.e., CISSP, CISM, ITIL) desirable but not essential</li>
<li>Technical Security Certifications (MSCE/MCTS, Azure &amp; O365 Security Certification, AWS Security Certification, CCNA, VMWare-VCP, CEH, CCSK, Security+, GSEC, Firewall Certification) desirable but not essential</li>
<li>Degree or equivalent (i.e. BSc, BEng, MSc) desirable but not essential</li>
<li>Comprehensive knowledge about Information Security standards, frameworks and best practices (i.e., ISO27K1, NIST, SANS, CIS, TOGAF, OWASP, Cyber Essentials)</li>
<li>Excellent understanding of Windows, Linux &amp; Mac systems, VMware, SANs, Networks, and Perimeter Security solutions (i.e., firewalls, mail gateways, load balancers, AV/MDR/XDR, IPS/IDS, SAML, LDAP, PKI, DNS, DHCP, PAM)</li>
<li>Good understand of embedding security in SDLC and DevOps functions</li>
<li>Strong and deep background in cyber / information security in complex global organisations</li>
<li>Track record of building / leading diverse, high performing, operations teams from the ground up and comfortable working with autonomy</li>
<li>Ability to provide leadership on complex and unfamiliar situations, often involving risk and emotion</li>
<li>Expert communicator with a track record of operating, partnering with and influencing up to and including exec-level stakeholders</li>
<li>Able to lead highly complex programmes across multiple units and geographies with high-pressure deliverable</li>
<li>Information Security subject-matter-expert with in-depth knowledge of security solutions in the cloud and on-prem IT infrastructure</li>
<li>Ability to operate and lead in a fast-paced organizational transformation and able to navigate and champion change across organisational / geographical complexity</li>
<li>A genuine desire to lead, develop, coach and mentor direct reports/team members.</li>
</ul>
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:
Passionate, inspired people – We promote a culture of people that do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?
WPP is an equal opportunity employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability. We believe in creating a dynamic work environment that values diversity and inclusion and strives to recruit a diverse slate of candidates to help us achieve that goal.
Please read our <a href="https://www.wpp.com/careers/wpp-privacy-policy-for-recruitment" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Notice</a> for more information on how we process the information you provide.

Kuala Lumpur

IT Security Lead

WHAT IS BOX?Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal.
By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 100,000 businesses, including 67% of the Fortune 500 who trust Box to manage their content in the cloud.
WHAT YOU'LL DO 
<ul>
<li>
Provide compliance guidance on new product features, deviations, and changes in the infrastructure
</li>
<li>
Implement improvements by assessing the current environment, evaluate trends, and anticipating future enhancements/requirements
</li>
<li>
Assess any M&amp;A activities for new products that Box is interested in, assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment
</li>
<li>
Provide guidance, knowledge papers, and FAQs for customers on new products regarding Security and Compliance, and the impact it has on compliance certifications
</li>
<li>
Work with the Box's Architecture Council to create repeatable patterns for deployments
</li>
<li>
Proactively identify issues related to our Compliance with existing and future standards and find solutions with the Engineering teams to address
</li>
<li>
Participate in cloud and application security strategic planning and execution
</li>
<li>
Drive improvements in existing processes and develop new innovative and efficient solutions
</li>
<li>
Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps
</li>
<li>
Build relationships with internal and external stakeholders
</li>
</ul>
WHO YOU ARE 
<ul>
<li>
5+ years of professional experience working in a SaaS company in GRC, Information Security or similar position
</li>
<li>
Expertise in cloud computing with experience in GCP products and services
</li>
<li>
Strong understanding of information security frameworks, such as FedRAMP, PCI, ISO 27000 Series, and SOC
</li>
<li>
BS degree in Business or Management Information Systems or related field OR equivalent work experience
</li>
<li>
CISSP, GSEC, CISM or other related certifications a plus
</li>
</ul>
<ul>
<li>
Excellent written, verbal communication and presentation skills with a willingness to wear different hats and work in areas where needed
</li>
<li>
Amazing organizational skills with a drive to succeed in a fast-paced environment
</li>
<li>
Ability to hustle, get stuff done, and has strong integrity - make mom proud!
</li>
</ul>

BENEFITS
<ul>
<li>Visit this webpage to check out all of our exciting healthcare benefits: <a href="https://join.collectivehealth.com/box" rel="noopener noreferrer nofollow ugc" target="_blank">https://join.collectivehealth.com/box</a></li>
<li>For all other benefits, please check out: <a href="https://cloud.box.com/s/3u38zhdv4gac9h0j7lmumm7arbe14yqa" rel="noopener noreferrer nofollow ugc" target="_blank">Box Benefits + Perks</a></li>
</ul>
EQUAL OPPORTUNITYWe are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Accommodations are available ‎throughout ‎the application process and an employee’s employment at Box.
HEALTH AND SAFETYTo promote the health and safety of all Boxers and our communities, in order to "Go to Work" at Box in the U.S., you must be Fully Vaccinated or have an approved accommodation. "Go(ing) to Work" at Box is defined as visiting a Box office, facility, or co-working site, visiting or meeting in person with fellow Boxers, Box clients and/or customers, vendors, or partners, engaging in business travel, and or participating in any Box-sponsored and/or related activity where others are present. If you are fully remote and do not "Go to Work,” the vaccination requirement is not applicable.  "Fully Vaccinated" means that an individual is at least two weeks past their final dose of an authorized COVID-19 vaccine regimen. If you are unable to get a vaccine due to a medical condition, a sincerely-held religious belief or another legally recognized reason, Box will consider requests for an accommodation.

 
 

#LI-KN1 #LI-REMOTE

North America

Product Compliance Manager, GRC

ARSIEM

About ARSIEM CorporationAt ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients.  We provide support to multiple agencies across the United States Government.  ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients.  That means a career packed with opportunities to grow and the ability to have an impact on every client you work with. ARSIEM is looking for a Cloud Forensics Analyst. This position will support one of our Government clients in Arlington, VA.
<h3>Responsibilities</h3>
<ul>
<li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.</li><li>Coordinate with enterprise-wide cyber defense staff to validate network alerts.</li><li>Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.</li><li>Perform cyber defense trend analysis and reporting.</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.</li><li>Provide daily summary reports of network events and activities relevant to cyber defense practices.</li><li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of alerts.</li><li>Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.</li><li>Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system, and information.</li><li>Identify and analyze anomalies in network traffic using metadata.</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.</li><li>Identify applications and operating systems of a network device based on network traffic.</li><li>Reconstruct a malicious attack or activity from network traffic.</li><li>Identify network mapping and operating system (OS) fingerprinting activities.</li><li>Assist in the construction of signatures that can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave </li></ul>
<h3>Minimum Qualifications</h3>
<ul>
<li>BS Computer Science, Cyber Security, Computer Engineering, or related degree or HS Diploma &amp; 10 years of network investigations experience. </li><li>Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability</li><li>8+ years of relevant experience in cyber defense analysis using leading-edge technologies and industry-standard cyber defense tools</li><li>Experience successfully developing and deploying signatures</li><li>Experience detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort)</li><li>Experience implementing incident handling methodologies</li><li>Experience implementing protocol analyzers</li><li>Experience collecting data from a variety of cyber defense resources</li><li>Experience reading and interpreting signatures (e.g. snort)</li><li>Experience performing packet-level analysis</li><li>Experience conducting trend analysis Desired Skills</li><li>Python programming experience</li><li>Strong math and science background</li><li>Experience with Carnegie Mellon SiLK tool suite </li></ul>
<h3>Preferred Qualifications</h3>
<ul>
<li>One or more: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, FedVTE • GSEC (SANS401), Arcsight (or other SEIM solution), Network+, Security+</li></ul>Clearance Requirement: This position requires an Active TS/SCI clearance and the ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is 5,000,  and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment.ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.

Arlington

Cloud Forensics Analyst

Apply to GSEC Cyber Security Jobs in companies remotely and near you. New GSEC Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr. Information Security Operations Analyst at Zwift	Analytics AWS CEH Cissp Cloud
Senior Information Security Analyst at Gainsight	Analytics Application Security AWS Cissp Cloud
IT Security Lead at WPP	Agile AWS Azure CEH CISM
Product Compliance Manager, GRC at Box	Application Security CISM Cissp Cloud Compliance
Cloud Forensics Analyst at ARSIEM	Arcsight CASP Clearance Cloud Cyber Defense

GSEC Cyber Security Jobs

0 GSEC Cyber Security Jobs. Page 1 of 1

5 closed gsec cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GSEC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

GSEC Cyber Security Jobs

0 GSEC Cyber Security Jobs. Page 1 of 1

5 closed gsec cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

GSEC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter