*Position: Security Engineer* *Location: Durham, North Carolina*
*Duration: 6+ Months* **LOCAL CANDIDATES ** *Security Engineer Job Details* We are looking for a talented Senior Security Engineer for our MIS Group in our Durham, NC location. Focus and experience in risk mitigation with possess at least 8 years of directly related practical experience within the last two years, and demonstrated ability to carry out the functions of the job. We are looking for candidates who can provide a well-rounded knowledge and experience base in incident response and security event analytics. An overall flexibility and willingness to work under unpredictable time and project variables is essential. *The Security Engineer will be responsible for the following:* • Experience analyzing malware such as viruses, worms, trojans, etc. • Experience in information security threat and vulnerability analysis • Understanding of networking and core Internet protocols (TCP/IP, HTTP, etc.) • Experience using network security assessment tools • Experience developing tools for automation and/or other tasks • Be a team player • Excellent verbal and written communication skills • BS or BSE in computer science/engineering, or equivalent experience *Additional responsibilities will include but are not limited to:* • Provide detection and response to security events and incidents within the customer network as well as various supported customer networks • PCI and Web application vulnerability scanning • Security log management and monitoring • Intrusion detections and prevention systems operations • Vulnerability detection, assessment, and mitigation • Develop and maintaining information security metrics. • Provide assistance to core security and incident response teams • Enterprise encryption standards development and support • Development and distribution of various security advisories and awareness messages • Maintain growing knowledge of industry trends relating to security management and services. *Security Engineer Mandatory Skills* • Thirst for knowledge and inquisitive nature • Experience and strong knowledge of vulnerability management and configuration compliance processes and tools • Experience and knowledge in Security Information Event Management tools • Experience in Intrusion Detection and Prevention Systems • Knowledge of: TCP/IP, computer networking, routing and switching • Experience in Linux/UNIX and Windows based devices at the System Administrator level • Strong troubleshooting, reasoning and problem solving skills • Team player, excellent communication skills, good time management • Organizational skills and the ability to work autonomously with attention to processes • Ability to speak and communicate effectively with peers, management and clients • Ability and willingness to think outside of the box to find creative and innovative solutions to reduce costs with a minimal impact on reliability. • Ability and experience in writing clear and concise technical documentation • Ability to speak and write fluently *Education or Experience:* • Graduation with a degree from a recognized university with specialization in Computer Sciences or a related discipline, • 8+ years of directly related practical experience. *Required Skills:* • Candidate should possess a knowledge in the following technical skills: Incident Response, Log Analysis, TCP/IP, Network Traffic Analysis, Antivirus/Malware, Intrusion Detection/Prevention, Security Incident and Event Management Systems (SIEM), Packet Analysis Techniques, Event Correlation, and Incident Triage. • Experience in security penetration testing • Experience using ticketing systems such as Remedy • Security certifications: SANS/GIAC (GCIH, GCIA or GCUX), CCNA, CISSP, or CISM certifications would be assets • Knowledge of application security including web applications, web services, XML, SOA, AJAX, JSON, and web scanning tools • Knowledge of: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) solutions • Knowledge of NIST, PCI, HIPAA -- Thanks & Regards Devaraj IT Recruiter Osair Technologies LLC | Desk: 703-349-2825 [email protected] -- You received this message because you are subscribed to the Google Groups "oraapps" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/oraapps. For more options, visit https://groups.google.com/d/optout.
