Tuesday, September 19, 2017

Sr. Compliance Consultant

Job Title: Sr. Compliance Consultant in San Francisco, CA 
Company: Mindlance 

Title: Sr. Compliance Consultant 
Location: San Francisco, CA 941057 
Duration: 12 Months (Can be extended) 


Qualifications: 
Qualifications: Minimum Qualifications 5 years experience at the senior consultant level Bachelor's degree in a related field or equivalent experience required Strong regulatory familiarity and expertise Excellent compliance and risk experience in corporate environment Strong knowledge and experience in compliance functions and documentation Strong research, analytical and information gathering skills Strong attention to detail and organizational skills, ensuring quality in deliverables Excellent skills in understanding complex business processes, working with the business compliance experts, and providing clear, concise guidance Proven ability to partner and work collaboratively as a team player; relationship building Ability to managing performance and be resourceful and adaptable to change. Demonstrated ability in advocacy and influence, conflict resolution, and process improvement Excellent communication and presentation skills Process Improvement utility industry knowledge Strong Excel, Word, PowerPoint skills; technological saavy 

Desired: 
• NERC CIP v5 subject matter knowledge 
• Knowledge of database and information systems - for example SCADA, EMS, OMT, OIS, SAP, ERP, COSO, Teradata, COBIT, QuestionMark - as needed to perform at the job level 
• Ability to apply project management theories, concepts, methods, best practices, and techniques as needed to perform at the job level 
• Knowledge of Physical Security and IT Cyber Security products and technologies 
• Knowledge of risk management techniques, technological trends and developments in cyber/information security, systems/software development, engineering, integration, testing and evaluation and operating systems 
• Understanding of computer networking technologies and protocols, and/or network security methodologies 
• Demonstrated systematic problem analysis, solving, and decision-making skills 
• Ability to influence and work with and across all levels within the business 
• Excellent written and verbal communication skills required 
• Ability to perform complex tasks using established policies, procedures and guidelines as reference 
• Policy and Procedure writing experience 
• Process development and process flow mapping experience 

Responsibilities: 
Responsibilities: Obtain, review, and interpret organizational CIP policies, standards and procedures to identify control points that would assist in mitigating risk to the business. 
• Review test results or interpret evidence for vulnerabilities, gaps, or control deficiencies and work with Compliance Specialists to close gaps 
• Identify risks associated with control failures and supports the identification of mitigating controls 
• Partner with System Owners to ensure control documentation is updated periodically to reflect current control environment 
• Leads and provides guidance on walkthroughs of processes and identification of gaps in controls. 
• Review compliance action plan and follow-up on open items. 
• Report on the “Health” for each NERC CIP Standard 
• Identify NERC CIP program gaps and initiate/coordinate mitigations 
• Coordinates upcoming NERC CIP activities to ensure timely completion of compliance requirements though Appian and tracking sheets. 
• Owns and documents the implementation of the controls and creates auditable evidence of security measures. 
• Ensure artifacts and evidence is of best-quality to meet compliance requirements.

diwakar chand 
732-243-0263


Monday, September 18, 2017

IT Security Analyst

Job Title: Exciting Job Opportunity – Rose Opening # : 266218 - Job Title : IT Security Analyst 
Company: Rose International 

The following job is now available and potentially matches your skills! I'd like to work with you in finding your next dream assignment, whether it is this position or another one of our thousands of openings. Please contact me at your earliest convenience or respond with a time and phone number where I can reach you. We look forward to working with you! 


New IT Security Analyst Job in Menlo Park, CA! 

Title: Information Security Risk Assessment and Metrics Analyst Contractor 
Duration: 6 months 
Location: Menlo Park CA 
Desired Skill Set: 
Analytical Skills, Risk Analysis, Risk Management 

Job Details: 
Client is seeking an Information Security Risk Assessment and Metrics Analyst to join the Information Security team. This position will be responsible for documenting and assessing risks and developing and analyzing metrics as part of Client''s Information Security Risk Management Program. The Risk Assessment and Metrics analyst will be someone that has a passion for identifying, evaluating, and quantifying security risk across a widespread and dynamic environment and helping demonstrate Client''s dedication to security to the world. This role requires a mix of broad business and technical acumen, evaluating risk, and a polished ability to communicate. This is a contract position. 

Skills: 
• 3+ years of risk management experience, including risk identification, assessment, and remediation, with proven ability to effectively apply risk principles to challenging business situations 
• 3+ years of experience developing, analyzing, and visualizing risk-based information security metrics 
• Experience with developing security reporting that is meaningful and actionable for a variety of audiences including internal stakeholders and external third parties 
• Proficient in delivering messages to a wide spectrum of individuals having varying degrees of technical understanding 
• Familiar with National Institute Standards and Technology (NIST) security controls, ISO 27000, or other major security controls framework 

Education: 
B.S. in Information Systems, Computer Science, or related field, or equivalent experience 



Anamika Sah 
Recruiter 
Phone: (636) 812-4000, Ext.: 5013 (C) 972-971-0142 
E-mail: asah@roseint.com 
www.roseIT.com

Friday, September 15, 2017

Sr Information Technology Analyst

Sr Information Technology Analyst 
COUNTY OF SACRAMENTO 
1718-7645.01 
Sacramento, CA 95814
6+ Months
 
JD:
This position will be primarily responsible for the management of our Trend-Micro Anti-Virus and Deep Discovery systems. Tasks will include managing Trend systems for efficient detection, containment, and recovery of malware events in a large enterprise network.
 
Key Accountabilities:
•         Respond to and analyze severity of malware alerts via endpoint controls, host-based intrusion prevention systems, email inspection and log correlation
•         Manage and tune anti-virus platforms to ensure maximum coverage and optimal signature/heuristics capabilities
•         Manage Deep Security deployments of Inspector and Analyzer across our data center environment
•         Work with appropriate technology groups, business operating units and individuals to mitigate infections and reduce propagation
 
Minimum Qualifications:
•         5+ years of actual work related experience in the field of Information Security in an operations center environment
•         Bachelor’s degree in related field or equivalent. Typical Certifications: CISSP, CISSP-ISSAP, GISP
•         Strong experience using Trend Micro Deep Security suite or similar enterprise-class AV solutions
•         Subject Matter Expert understanding of malware distribution and technical risk
•         Ability to prioritize response activities based on intake queues and SLAs
•         Ability to work across varying levels of technical competency in order to accurately communicate risk and mitigation activities
 

Yachna Narang
22nd Century Technologies Inc.

8251 Greensboro Drive, Suite 250
Mclean, Virginia - 22102
yachnan@etalentnetwork.com
1703-373-7340 Ext.396

Senior Information Security Analyst

Job Title ::Senior Information Security Analyst
Location:: San Jose, CA
Duration :: Fulltime

This is a critical role responsible for providing program support & leading a global and cross- functional team to identify & drive remediation of security vulnerabilities. As leader the priority is protecting client corporate environment by ensuring highest level of security scrutiny.

Roles and Responsibilities
Candidate will work as a member of the Corporate Security Team and assist in various day to day operational activities such as:
Drive Corporate Security Program based on the NIST CSF ? Identify, Detect, Protect,Respond and Recover. 
Identify and Monitor Corporate Networks to determine if there have been any attacks. 
Analyze network traffic to identify anomalies and test information security controls for weaknesses.
Design and implement safeguards to protect the system with the help of network engineers and other members of the Technology Services team.
Respond to threats by taking mitigating actions to contain the activity and minimize damage.
Participate in risk assessments and breach readiness exercises for incident management.
Facilitate forensics analysis to determine the source of the threat. Document lessons learned as well as identify process improvements.
Communicate security issues to management via reports, dashboards. Provide weekly metrics on overall security posture.
Research emerging threats and work with the Security Operations Center (SOC).
Drive the Vendor Security Program including annual self-assessments.
Participate in the security toll-gates on projects.

Qualifications
Bachelor's Degree in Business, Computer Science or in a STEM major (Science, Technology, Engineering, or Math).
Industry Certifications ? Network Security or Certified Information System Security Professional (CISSP) with professional experience in Network Security.
Knowledge of software development, computer networks and Internet threat activity.
Knowledge of Security Incident and Event Management (SIEM) tools (Splunk, Qualys).
Previous enterprise or platform/cloud vulnerability management experience.
Previous experience leading an information security program in large, national or international enterprise a plus.
Excellent written and verbal communication skills, including experience engaging with executive and technical audiences.
Must be able to work in a fast paced, high profile environment.

Anvesh
Talent Acquisition
Inter Sources Inc.
An E-Verified Employer
39159 Paseo Padre Pkwy # 106 Fremont CA 94538.
Direct: 510 369 4177 Email: Anvesh@intersourcesinc.com

IT Security Analyst

Position Title: IT Security Analyst
Position Number: 266036
Location: Concord, CA
Desired Skill Set:
CISSP, cyber security, IEF
Position Description:
U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor or consider Corp 2 Corp candidates

Title: IT- Cyber Security Threat Analyst/Specialist – Senior
Location: Concord, CA, 94518
Duration: 5 Months

Description:
• Qualifications:
• Bachelors in Computer Science, or related discipline, or equivalent experience Certified Information Systems Security Professional (CISSP) certification Experience in Information Technology (IT), 6yrs Utilizes digital forensic tools including Guidance EnCase, SIFT Workstation,volatility, IEF, and Responder Pro to execute digital investigations and perform incident response activities

• Responsibilities:
Acts as a subject matter expert in area of field. Leads moderately to complex projects which may be cross functional. Conduct computer forensics, registry and memory analysis to identify malicious activity. Analyzes complex malware/exploits through forensics, observation of network traffic and using other tools and resources to determine if client systems are vulnerable.
• Leads development of framework for implementing tools and processes to improve quality and timeliness of reports. expert in area of field and applies extensive knowledge of concepts, principles, and practices.
• Codes complex tasks that integrate systems, produce reports or provide output that can be leveraged by other team members or systems.
• Performs proficient forensic analysis using security tools and monitoring systems to discover the source of anomalous security events.
• Assists in performing basic research internally and externally.
• Performs complex system administration tasks (e.g. customization, cross-tool integration) for security tools. Develops a strategy to implement work in department.
 

Haroon Fayyaz
Recruiter
Phone: (636) 812-4000, Ext.: 6631 | Fax: (636) 812-0078
E-mail: hfayyaz@roseint.com

Senior Security Engineer

Job Title: Lead/Senior Security Engineer
Job Type: Contract to Hire
Location: Grand Rapids, MI

This role is responsible for the creation, enhancement, and operation of information security incident response process and technology. This includes HR and legal investigations, endpoint and network incident detection and response coordination, and threat hunting.

Qualifications:
  • Basic Qualifications:
  • Education - Bachelor's Degree or equivalent or equivalent
  • Experience - 10 years of experience typically gained through skills/knowledge/abilities in the field

Preferred Qualifications:
  • Education - Bachelor's Degree or equivalent or equivalent
  • Experience - 15 years of experience typically gained through skills/knowledge/abilities in the field.
  • Full-time experience and demonstrated maturity in security engineering, including experience with network intrusion detection systems, packet capture techniques and analysis of raw packet captures.
  • Expert experience with or knowledge of network topology/ infrastructure, client/server, databases, web security, multiple operating systems (Windows, *nix, mainframe, IOS/mobile, embedded), web operations, encryption, authentication, vulnerability scanning, virus/malware management, data loss/leakage prevention, logging/security information management, firewall and intrusion detection systems.
  • Experience with security information management systems and common system log formats, including syslog and Event Log, as well as using vulnerability assessment systems to test enterprise networks and applications.
  • Experience leading security incident response procedures, and authoring information security policies and procedures.
  • Strong experience with the theory and practice of information risk analysis and risk management
  • Licenses - Information security certification, such as: SANS GSEC or GCIH, Cisco CCSP, Microsoft MCSE: Security, CISSP, CISA or CRISC

If you are not interested in looking at new opportunities at this time I fully understand. I would in that case be appreciative of any referrals you could provide from your network of friends and colleagues in the industry. We do offer a referral bonus that I’d be happy to extend to you if they turn out to be a great fit for my client.

Thank you for your time and for consideration. I look forward to hearing from you.


Best Regards,
Navdeep Sachdev
Technical Recruiter
Integrated Resources, Inc
navdeep@irionline.com
(732) 429-1930
Edison NJ 08817

INFORMATION SECURITY SENIOR

Position: INFORMATION SECURITY SENIOR
Location: Carrollton, TX
Duration: Full Time

 Required Skills:
*  BachelorĂ¢€™s Degree  with a technical major, such as engineering or computer science or equivalent work experience.
*  5-7 years of professional IT experience, with at least 3 years of information security experience
*  Hands on experience in one or more security technologies such as CA Control Minder (eTrust Access Control), RSA Authentication Manager Administration and Tivoli Access Manager
*  Ability to understand and write the security rules/policies for the tools, troubleshoot and resolve the issues on a timely manner
*  Ability to document concise technical design specifications
*  Understanding of Information Security principles and basics of information security policy
*  Good grasp on UNIX scripting or any other scripting technologies.
*  Ability to prioritize work without management direction, and provide clear and documented status updates to the management and the team.
*  Experience in supporting Security tools and appliances
*  Must have an ability and initiative to learn and adapt to new capabilities based on the needs 
*  Advanced problem solving skills and ability to work effectively under aggressive timelines
*  Proven written and verbal communication skills with both Business/Management and Technical/Engineering resources

Preferred Skills:
*  Background & proficiency in development using languages such as Java will be a plus
*  Previous experience as UNIX administrator will be a plus
*  CISSP or similar security certification will be a plus

Ajay Kumar
SR. IT Recruiter
USM Business Systems

Thursday, September 14, 2017

Cyber Security Threat Analyst



Title: IT- Cyber Security Threat Analyst/Specialist – Senior

Location: 1030 Detroit Ave, Concord, California 94518 United States

Duration: 5 month+ contract



Qualifications:
Bachelors in Computer Science, or related discipline, or equivalent experience Certified Information Systems Security Professional (CISSP) certification Experience in Information Technology (IT), 6yrs Utilizes digital forensic tools including Guidance EnCase, SIFT Workstation,volatility, IEF, and Responder Pro to execute digital investigations and perform incident response activities





Responsibilities:
Acts as a subject matter expert in area of field. Leads moderately to complex projects which may be cross functional. Conduct computer forensics, registry and memory analysis to identify malicious activity. Analyzes complex malware/exploits through forensics, observation of network traffic and using other tools and resources to determine if PG&E systems are vulnerable. Leads development of framework for implementing tools and processes to improve quality and timeliness of reports. expert in area of field and applies extensive knowledge of concepts, principles, and practices. Codes complex tasks that integrate systems, produce reports or provide output that can be leveraged by other team members or systems. Performs proficient forensic analysis using security tools and monitoring systems to discover the source of anomalous security events. Assists in performing basic research internally and externally. Performs complex system administration tasks (e.g. customization, cross-tool integration) for security tools. Develops a strategy to implement work in department.




Manjunath Hebbar

(O) 510-984-2290 ; (C) 510-279-4856

manjunath@finezi.com

Fax: (510) 280-1653

Finezi Inc. 31080 Union City Blvd, Suite 212 Union City, CA 94587

| www.finezi.com |

Cyber Security Engineer III

Title: Cyber Security Engineer III
Location: Northborough, MA
Duration: 12 Months

Knowledge & Experience Required: 
• Demonstrate experience of managing and maintaining Security tools within global Cyber Security Operations environment. 
• Demonstrate in depth knowledge and experience of the following operating systems: 
o Windows Server 
o Unix/Linux (particularly RedHat) 
o Windows Desktop 
o VMWare 
• Experience with MSSQL, MYSQL and Oracle Databases 
• Demonstrate in depth knowledge of SIEM (Arc sight), “one” of the following: Bluecoat, Skybox, Lancope, and at least “two” of the following: NIDS/NIPS, Endpoint Security toolsets, DLP, Network security technologies. 
• SCADA /ICS environments. 
• Demonstrate ability to formulate formal configuration and build documentation 
• Experience of developing SIEM correlation rules and snort signatures for Arc sight 
• Previous roles in Cyber Security Management. 
o Produce situational reporting from network security tools. 
o Seek out and identify anomalous activity and behaviours. 
o Demonstrable experience in network security engineering and analysis including the deployment / management of firewall, router, switching, IDS/IPS and netflow technologies. 
• Provide technical risk assessments as required and deliver recommendations and mitigation options. 
• Liaise with incident management teams to ensure any incidents are handled efficiently. 


Qualifications Required/Desirable: 
• Degree level or demonstrable equivalent experience 
• MS Professional Certification 
• Unix/Linux Certification or equivalent experience 
• GIAC/CEH or similar 
• Network certification(s) e.g. CCNA 
• Holds relevant Information Security certifications (e.g., CISSP, CISM, GSEC, GCIA) 
• Experience of ITIL practices 
• CCNP/CCIE Security 
• Knowledge / Experience of utilising Netflow Security and Network risk management tools, commercial and open source    
• Knowledge / Experience of: HP Arc sight, Skybox, Lancope (steathwatch) & Bluecoat (SSL, Forensic packet capture, Malware protection service) systems


Rahul Bouddha
Sr. Recruitment Specialist | Neotecra
Phone: 908-315-9558 
Email id: brahul@neotecra.com 

Security Analyst

Title : Info Security Analyst – Int.
Location: Broomfield, CO
Duration: 06-12 Months
 
Role Summary (overall purpose and objectives of role):  
The incumbent will be responsible for triaging and validating security events.  In addition, the incumbent will be responsible for proactively hunting and seeking for unidentified threats in the environment.  Secondary duties will consist of operationalizing new – and tuning existing – security solutions to ensure that only actionable data are escalated as security events.
 
All candidates for this role must be open to shift work as this is a 24x7 environment. Specific shifts will be discussed with each candidate to determine specific hours and days.
 
Responsibilities (List principle tasks, duties and responsibilities of the job):
  • Respond to network and host based security events
  • Minimize the dwell time of threat actors by monitoring, triaging, and validating security events, while maintaining thorough documentation in the case management system
  • Operate with little-to-no direction and define relationships between seemingly unrelated events through deductive reasoning
  • Actively hunting for and dissecting previously unidentified threats in the environment
  • Participate in intelligence sharing and trust groups, then apply this knowledge to security controls
  • Develop and maintain standard operating procedures to reflect day-to-day security operations
  • Create innovative in-house control capabilities to assist in the automation of existing security operations functions
  • The role is involved in projects or issues of high complexity that require in-depth knowledge across multiple technical areas and business segments
 
 
Required Skills (Minimum knowledge, skills and abilities to enter the job):
  • Minimum of 1-3 years of experience within the IT field
  • Exceptional written and oral communication skills
  • Strong critical thinking and analytical skills
  • Attention to detail
  • Experience handling security incidents, to include reviewing raw log files, data correlation, and analysis
  • Experience with and thorough understanding of attack vectors, threat tactics, and attacker techniques
  • Able to proactively perform duties and responsibilities with little-to-no direction
  • Able to effectively and efficiently collaborate with a diverse and geographically distributed team
  • Must be willing and able to work a shift routine
  • Ensure successful handoff of procedures between shifts
 
Desired Skills (Preferred not required):
  • Bachelor's degree in computer science, information technology, or related field is required  
  • Experience with enterprise information security data management tools such as ArcSight or Splunk is preferred
  • Solid experience in scripting languages such as (or similar to) Python, PERL, and Ruby is a plus
  • Proficiency with RSA Archer
  • Experience with industry standard frameworks
  • Experience with YARA, regex, or other host/network-based signature development
 

Manoj Kar 
eTeam Inc
mkar@eteaminc.com
(732) 983-5603 Ext.534
1001 Durham Avenue, Suite 201
South Plainfield, NJ, 07080

Wednesday, September 13, 2017

Systems Specialist

TitleSystems Specialist
Company: Genentech
Pay Rate: DOE
Position Type:Contract--3 months+
Location: South San Francisco, CA, United States

This contract position is in the Development Sciences informatics organization at Genentech. Development Sciences (Dev Sci) is a translational science organization that plays a critical role in Genentech Research and Early Development as well as late stage development of our products at Roche. Dev Sci supports drug discovery and development projects across all therapeutic areas from discovery to launch and beyond. The DevSci Informatics group plays a central role in delivering scientific (Pre-Clinical safety data, clinical/non-clinical Bio Marker data, PK/PD, Diagnostics and bio Analytical data) and operational data to scientific and business stakeholders in gRED (Research and Early Development) to ensure swift interpretation and decision making. These data not only impact decisions related to ongoing programs but also provide key knowledge as it relates to new target discovery.  DevSci Informatics is accountable for leading the strategy and execution around data lifecycle management, data standards, analytics infrastructure, ongoing data operations and informatics systems.
 
The System Specialist  will have knowledge of biological science, data reporting, data analytics, development of data visualization/analysis capabilities.  The candidate will collaborate and contribute in cross-disciplinary team that identifies and implements Informatics capabilities.
 
This position supports the full range of activities in the system lifecycle including business case development, business analysis, software development, testing, documentation, and ongoing maintenance and support of the Informatics platforms. 
 
Responsibilities include:
•             Work with scientific and operational end users to understand their technology needs and develop Informatics solutions, capabilities and systems.
•             Deliver scientific and operational data to scientific and business stakeholders.
•             Work with scientific and operational end users to identify, troubleshoot, and resolve technical and process issues related to IT systems, informatics capabilities, data quality, data receipt and data life cycle management. Trouble shoot and resolve day to day data integrity issues
•             Able to envision, design and implement scientific data visualizations, data mining capabilities and trouble shoot data integrity issues.
•             Interface with Research IT and Development Science IT organizations to resolve system and data issues, develop new system capabilities
•             Savvy with creating data visualization dashboards by mapping relevant scientific and operational data
 
 
Skills:
•             The individual should have the ability to simplify scientific data problems and propose simple, efficient, and elegant Informatics solutions with strong collaboration skills to interact with diverse users.
•             The successful Software Specialist candidate will be proactive, outgoing with excellent interpersonal, organizational, analytical and problem-solving skills.  
•             Must be detail oriented, with ability to multi-task and work in both an individual and team-based environment.
•             Experience in supporting data repository, data management, mining and visualization.
•             Experience with scripting or programming languages is a must. 
•             Expert in developing Spotfire dashboards for data visualization or use of any other BI tool.
•             Excel VBA macros to process scientific data, and business process support.
•             Google sites development and solid functional knowledge of Google Applications (Javascript)
•             Expert in Oracle database, writing SQL query and knowledge of informatica, ETL design and development
Qualifications
•             Education:  BS in Computer Sciences
•             Experience: 3-5 years of professional IT/ Informatics experience in developing and managing Informatics solutions/capabilities for biological sciences or an equivalent combination of education, training.
•             Experience as an operations analyst for a set of technology solutions.
•             Demonstrated experience collaborating across multiple IT functions and customer groups


Naveen Pole
Infobahn Softworld, Inc.
2010 N. 1st Street, Ste 470
San Jose, CA 95131
Phone: (312) 281-7143
Email: naveenp@infobahnsw.com