IT Security Analyst

A preeminent law firm in New York City is seeking an IT Security Analyst who will be responsible for supporting and contributing to the ongoing maintenance and development of the firm’s Global Security program.

RESPONSIBILITIES

• Assists with investigations of security events to determine malfunctions, breaches, and remediation steps.
• Monitor systems to identify and respond to anomalous activity such as worms, Trojans, viruses, and malware.
• Responsible for operation of vulnerability assessment tools, scanning, researching and analyzing vulnerabilities.
• Research the latest IT security trends, attack vectors, and methodologies; understand the countermeasures in the industry and engage with stakeholders to resolve identified vulnerabilities within SLAs.
• Knowledge of networking components and various operating systems and cloud environments and understanding their security principles and technologies.
• Participate in a 24×7 Incident Response Team

REQUIREMENTS

• Bachelor’s Degree
• Current CISSP
• Other current industry certifications a plus ie: GIAC, CEH, Cisco Information Security Specialist, or Cisco Certified Firewall Specialist
• 2-5 years of experience in Information Security with experience in large scale vulnerability and threat management program
• Hands-on experience in designing and implementing technical solutions of IT Security tools at the enterprise level – e.g. AV, FW, SIEM, IDS/IPS, web and email content filtering, Vulnerability Management Tools, etc.
• Demonstrated experience in vulnerability management, including working with vulnerability management tools such as Qualys, Tenable, Rapid7 etc.
• Experience with SIEM technologies, including administration and analyst operation of SIEM within SOC functionality identifying relevant threats, recommend corrective actions, summarizing and reporting results.
• Understanding of common security device functions, such as IDS/IPS, Network and Host-based firewalls, DLP (Data Leakage Protection), encryption, endpoint security.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent communication skills, troubleshooting and analytical thinking skills
• Scripting experience with Python, Powershell etc. a plus