Security Gateway Administrator

Job Description

Job Title: Security Gateway Administrator

Location: San Ramon, CA 94583

Duration: 6 Months

Required:

• Bachelor's degree in Computer Science or related field, or equivalent work experience

• Formal IT Security/Network Certification such as SANS GIAC Certified Intrusion Analyst (GCIA) or SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Continuous Monitoring (GMON) or related Degree

• 6 years of Information Technology experience, with at least 4 years of experience in information security working within security operations

• Security Operations Center (SOC) experience

Desired:

• Utility Industry experience

Required:

• Deep knowledge of log, network, and system forensic investigation techniques

• Deep knowledge of diverse operating systems, networking protocols, and systems administration

• Deep knowledge of commercial forensic tools

• Deep knowledge of common indicators of compromise and of methods for detecting these incidents

• Deep knowledge of IT core infrastructure and cyber security components/devices

• Deep knowledge of TCP/IP Networking and knowledge of the OSI model

• Deep knowledge of OS management and Network Devices

• Deep knowledge of Intrusion Detection/Prevention Systems

• Deep knowledge of Antivirus Systems

• Intelligence driven defense utilizing the Cyber Kill Chain

• Significant experience monitoring threats via a SIEM console

• Significant experience performing analysis of log files from a variety of sources, to include individual host logs, network traffic logs, firewall logs, or intrusion prevention logs

• Excellent problem solving, critical thinking, and analytical skills - ability to de-construct problems

• Strong customer service skills and decision-making skills

• Significant experience with packet analysis (Wireshark) and Malware analysis preferred

• Working knowledge of PG&E infrastructure preferred

• IBM QRadar and Dell SecureWorks experience preferred

• Candidate must have familiarity with regulatory requirements, such as NERC/CIP, NIST SP 800, SOX, etc

Desired:

• Experience with scripting in Perl/Python/Ruby/PowerShell

• Experience with network and desktop-based and server-based forensics

• Malware reverse engineering skills

Qualifications

Additional Information

Thanks & Regards’

___________________________________________________________________________

Vikram Bhalla |Team Recruitment |Mindlance, Inc. | W:732 504 6695

.