Role: Information Security Analyst - II
Location: Palo Alto-CA, 94301 (95% remote)
Duration: 1+ Year (possible extension)
Location: Palo Alto-CA, 94301 (95% remote)
Duration: 1+ Year (possible extension)
Description:
Analyze and evaluate threat alerts generated while interacting with the Verizon Autonomous Threat Hunting Data Science team to improve detection and mitigate false positives.
Activities:
- Track and collect threat indicators of compromise
- Maintain and update blacklists and whitelists
- Monitor threat alerts to identify, validate and clean false positives
- Identify and evaluate new threat intelligence sources
- Revise and identify automation opportunities for internal and intermediate threat detection reports
- Identify issues and/or suggest improvements to the product portal and user experience
- Help develop and enhance analytics on the Autonomous Threat Hunting product
MUST HAVE SKILLS:
- Bachelor’s degree in Computer Science or a related discipline, or equivalent work experience. 5 to 7 years of experience.
- Experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols.
- Strong Information Security technology background with demonstrated knowledge of network security fundamentals.
- Strong understanding of networking protocols such as TCP/IP, UDP, HTTP, FTP, RPC, SSL, SSH, SMTP, SNMP and TLS.
- Work well independently and within a team, have excellent and strong verbal and written skills, demonstrate strong troubleshooting skills and have an in-depth knowledge about security issues.
DESIRED SKILLS:
- Proven experience with evaluating and reviewing Network Detection and Response alerts
- Proven experience evaluating and reviewing Threat Intelligence indicator from multiple diverse sources
EDUCATION/CERTIFICATIONS:
- Bachelor’s degree in Computer Science or a related discipline, or equivalent work experience. 5 to 7 years of experience.
Activities:
- Track and collect threat indicators of compromise
- Maintain and update blacklists and whitelists
- Monitor threat alerts to identify, validate and clean false positives
- Identify and evaluate new threat intelligence sources
- Revise and identify automation opportunities for internal and intermediate threat detection reports
- Identify issues and/or suggest improvements to the product portal and user experience
- Help develop and enhance analytics on the Autonomous Threat Hunting product
MUST HAVE SKILLS:
- Bachelor’s degree in Computer Science or a related discipline, or equivalent work experience. 5 to 7 years of experience.
- Experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols.
- Strong Information Security technology background with demonstrated knowledge of network security fundamentals.
- Strong understanding of networking protocols such as TCP/IP, UDP, HTTP, FTP, RPC, SSL, SSH, SMTP, SNMP and TLS.
- Work well independently and within a team, have excellent and strong verbal and written skills, demonstrate strong troubleshooting skills and have an in-depth knowledge about security issues.
DESIRED SKILLS:
- Proven experience with evaluating and reviewing Network Detection and Response alerts
- Proven experience evaluating and reviewing Threat Intelligence indicator from multiple diverse sources
EDUCATION/CERTIFICATIONS:
- Bachelor’s degree in Computer Science or a related discipline, or equivalent work experience. 5 to 7 years of experience.
Creospan, Inc.
Address: 1515 E., Woodfield Road, Suite 350, Schaumburg, IL 60173
Office Phone: +1 (847) 598 – 1101
Website: www.creospan.com