*Hi ,*
*Please lookup the below position and if you are comfortable then share your updated resume.* *Position: Cyber Security Engineer * *Location: Aurora, IL* *Duration: 6+Months * *Interview Mode: Phone followed by Skype/In person Interview* *Job Description:* The successful candidate must be well versed in security operations; cyber security tools, intrusion detection, and secured networks. They will serve as an expert and be responsible for providing network and security operations technical analysis, assessment and recommendations in the areas of real-time security situational awareness, operational network system and applications systems security monitoring. Monitoring various security tools (e.g., AlertLogic, SourceFire, Cisco ASA, Sophos and Umbrella) to identify potential incidents, network intrusions, and malware events, etc. to ensure confidentiality, integrity, and availability of the company architecture and information systems are protected. *Essential Skills* · Work with the business units to create and deploy application security policies and processes. · Assist business units to design vulnerability remediation solutions. · Collaborate with business units to implement security solutions. · Responsible for security event handling and security incident response processes, including documenting standard operating procedures and protocols and automating common tasks. · Research, implement and administer security infrastructure as required, including intrusion protection, security-related firewall configurations, endpoint solutions, anti-phishing and SIEM tools, including tuning and custom alerts. · Implement and document best-practice security procedures, standards, and guidelines. · Identify security exposures and develop mitigation plans. · Advocate security awareness and teach secure behavior and methods. · Perform technical risk assessments, triage security-testing results and manage security response actions. · Work closely with IT on the development of security metrics, assisting in compliance audits, and continuous security improvements. · Exposure to cloud computing environments (AWS, Azure, GCP, etc.) · Exposure to manufacturing Operational Technology (OT) *Compliance* · Experience with data protection regulations including GDPR, HIPAA Hi-Tech using ISO-27001and other industry best practices. · Assist in compliance activates such as external audits from customers, regulatory compliance projects, and overall information security reviews. *Business Unit Relationships* · Ability to build relationships and own a proven record of accomplishment of using critical problem-solving and interpersonal skills to achieve success · Strong technical verbal and written communication skills. Demonstrated ability to communicate complex concepts to both technical and non-technical audiences. · Ability to thrive in ambiguity and successfully execute even if requirements are not yet fully understood or defined · Strong quantitative and analytical skills, proven ability to track and successfully complete complex program. *Incident Response/Incident Management* · Reviewing and analyzing log files to report any unusual or suspect activities · Utilize incident response use-case workflows to follow established and repeatable processes for triaging and escalating · Generating trouble tickets and performing initial validation and triage to determine whether incidents are security events using open source intelligence (OSINT) · Following established incident response procedures to ensure proper escalation, analysis and resolution of security incidents · Reporting incidents to US CERT and providing detailed information for use in after action reports · Analyzing and correlating incident event data to develop preliminary root cause and corresponding remediation strategy · Providing technical support for new detection capabilities, recommendations to improve upon existing tools/capabilities to protect the VA network, and assessments for High Value Assets *Hands-on experience with following technologies:* *Centrify, RSA, Cisco ASA,* FortiNet, Palo Alto, and SonicWall, Cisco Firepower, MDM (Intune and/or Idaptive), Sophos EPP, Cloud connectors, Office365, AzureAD, Cisco Ironport, Cisco Umbrella, VMware Horizon and AlertLogic *Educational/Certifications* Bachelor’s degree or higher in Computer Science, Electrical Engineering or other engineering or technical discipline and at least 10 years IT experience. Security certifications and/or training preferred (e.g. CISSP, Security+, GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), CISM, CISA, etc.) *Skill Matrix:* Total IT Experience: Experience as Cyber Security Engineer: Experience with Centrify: Experience with Monitoring various security tools (e.g., AlertLogic, SourceFire, Cisco ASA, Sophos and Umbrella): Experience with FortiNet: Experience with Palo Alto: Experience with Cisco Firepower: Experience with Cisco Umbrella: Experience with Office365: Experience with data protection regulations: Experience with Incident Response / Incident management: Experience with cloud computing environments (AWS, Azure, GCP, etc.): Highest qualification: Certification- If Any: 2 Professional references: LinkedIn ID- If Any: *Thanks & Regards,* *Abhishek Kumar | **Sr. Technical Recruiter* *Sage Group Technologies Inc., **www.sagegroupinc.com* <http://www.sagegroupinc.com/> *Direct: 732.837.2134 | Email: **[email protected]* *W:* 732.860.4602 X 305 3400 Highway 35, Suite # 9A, Hazlet, NJ 07730 [image: Description: cid:[email protected]] *Disclaimer*: This is not a Spam mail, we are contacting you because either you have applied for a similar role with our company in the past, have your resume posted on job boards, professional groups, etc., We apologize if this email has caused any inconvenience, please disregard if this is not relevant to you or reply with remove and we will be sure to take the necessary steps to avoid any further inconvenience. -- You received this message because you are subscribed to the Google Groups "project managment" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/project-managment. To view this discussion on the web visit https://groups.google.com/d/msgid/project-managment/CALnpRi2TF7ivHe48YFg-Zk0yE7Hkg5uMxu13YGWQAt-UvedO-w%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
