Security Engineer

Company Name:
Our client is seeking a Security Engineer to Provide Technical and Security Expertise for their Bronx, NY location.
The Security Engineer will:
Prevent, Manage and Contain worm/virus outbreaks and data breaches
Recommend remediation steps for
and incidents
Identify cyber threats, attack patterns and recommend corresponding security controls
Use , administer and manage Arcsight
Perform packet analysis, security log analysis & threat analysis/correlation
Analyze, triage and escalate malware, including investigations of botnet and rootkit behavior.
Co-ordinate incident response across multiple teams while providing technical assistance
Identify advanced techniques and coordinate to improve analysis capability
Identify and recommend process creation and improvement
Highest point of technical escalation for all cyber security incidents
Support / Mentor analysts on new techniques and information sources
Ability to assess and develop security architecture
Maintain and develop relationship with the business and law enforcement agencies
Work closely with Governance, Risk and Compliance team
Work Relations
All levels -Proactive monitoring of Cloud, Secure File Transfer and Mobile Device management. Escalate issues as required by internal procedures.
Network and Infrastructure Vendors, Consultants, and Partners - coordinate with external partners for technical issues, and escalation of incidents.
Job Requirements
Bachelors in Computer Science or related major.
CISSP , CCNA Security or SANS GREM security certification

Knowledge and Experience:
7+ years experience in IT with at least 4 years working as a security monitoring/incident response engineer
2-3 years security monitoring/log analysis experience (correlating logs from IDS, IPS, Firewall, Windows, NIX, Web Proxy, AntiVirus, NetQoS etc) using Arcsight
1-2 years experience using windows incident response toolkits
1-2 years experience performing forensics & reverse malware analysis using tools such as Sleuth Kit, Encase, OllyDbg, IDA Pro
Working knowledge regex, Perl, Python or any other shell scripting languages.
Familiar with HIPAA , NIST or COBIT standards
Strong knowledge of TCP/IP
Routing/Switching, Server Administration or Database experience, a plus
Excellent analytical and reporting capabilities
Ability to work well under pressure and address incident management demands.
Ability to analyze complex information security problems and provide focused solutions to accomplish program objectives.
Other Desirable Skills:
Good communication skills - have to interact with vendors, train users, and give instructions. Must be able to work effectively with people of different national and cultural backgrounds in a team environment.
Considering rapidly changing technology, incumbent has to adapt and learn quickly.
Ability to work independently, make decisions without consulting supervisor, and prioritize work. Supervisory control is limited to the overall direction of projects and the issuance of new assignments.
Attention to quality and capacity to meet deadlines, with good self-motivational skills.

Don't Be Fooled

The fraudster will send a check to the victim who has accepted a job. The check can be for multiple reasons such as signing bonus, supplies, etc. The victim will be instructed to deposit the check and use the money for any of these reasons and then instructed to send the remaining funds to the fraudster. The check will bounce and the victim is left responsible.