Information Security Analysts

Date Posted: January 23, 2014

Job Location: Alabang and Cebu City

Job Description:

 
Preferences
 
Preferences
  • Perform network security monitoring activities to identify security incidents on Fluor’s global network using SEIM, intrusion detection sensors (network- and host-based) and other security monitoring tools.
  • Analyze system event logs, traffic flows and other data sources to identify and investigate suspicious or malicious network/system activity.
  • Respond to security incidents in an effective and efficient manner to limit risk presented to the organization.
  • Perform vulnerability assessments of Windows- and Unix/Linux-based systems, document findings and recommend risk mitigation strategies.
  • Work with internal teams to achieve vulnerability and risk management objectives. Assist departmental technical support staff in identifying and implementing appropriate security safeguards.
  • Assist in threat analysis and modeling; involving examination, analysis, documentation and assessment of internal and external threats
  • Produce metrics that represent the current state of network security monitoring and incident response processes.
  • Maintain workable knowledge and understanding of information security, intrusion detection, risk management and regulatory compliance topics.

Qualifications:

 
Preferences
 
Preferences
  • Minimum of 4 years in Information Technology
  • Minimum of 2 years in Information Security working with SIEM platforms analyzing and investigating suspicious or malicious network/system activity. •  Good working knowledge of:
    • Information security fundamentals
    • Incident response
    • Risk management concepts
    • Security architectures
    • Networking and security (eg. TCP, SSL, authentication, intrusion detection, firewalls, etc) Host intrusion detection
    • Network intrusion detection
    • Security scanning tools (eg. Nessus, Nexpose, Nmap, MBSA)
  • Working knowledge in performing network security monitoring and incident response.
  • Experience in installing, configuring, integrating and maintaining Security Event Information Management (SIEM) platforms
  • Understanding information security holistically and its value to the business.
  • Good understanding of security frameworks and standards (e.g. ISO 27002, NIST 800-53).
  • Obtain or maintain professional/technical certifications of information security knowledge (e.g. Security+, CEH, CISA, CISSP)
  • Understanding the use and application of security controls for risk mitigation.
  • Demonstrated teamwork and collaboration in a professional setting
  • Strong written and verbal communications skills.
  • Solid business acumen

*Only shortlisted candidates will be notified. 

Like us on Facebook: www.facebook.com/globalquestconsulting