SIEM C​/C++ Python Scripting Office Analyst

SIEM C/C++ Python Scripting Office 365 Analyst

Location:

Columbia, SC.

Job type:
Contract (12 months).

• Candidate should be an expert security administration and security continuous monitoring.
• Candidate should be an expert in performing log analysis, risk analysis, incident response processes, and investigation procedures. This includes experience working in a security operations center and working with security tools including SIEM, EDR/XDR, IPS/IDS. Candidate should have experience with data blending and report generation.
• Planning, implementing, upgrading, and monitoring security measures for the protection of computer network security and information – both LAN and cloud based.
• Develop and implement security policies, procedures, and standards to protect the organizations data and assets.
• Monitoring and reporting on SIEM and EDR event data.
• Maintaining records of security events investigated and incident response activities.
• Serve as a Tier III security support on the agency's security team.
• Conduct security assessments of systems, networks, and applications to identify vulnerabilities and risks.
• Work with and provide mentorship to other information security team members on security strategies, processes, response, and technologies.
• Respond to security incidents and breaches, and work to mitigate the impact and prevent future incidents.
• Provide incident response support, threat assessment, and computer forensic investigations.
• Coordinate and assist with other Information Technology functions/teams to accomplish agency security objectives.
• Creating risk analysis documents when reviewing system functional specifications including use cases, activity, sequence, data flow, collaboration, and diagrams.
• Create security report using complex SQL queries, API integrations, and Power BI.
• Knowledge of blue team tools such as SCAP workbench, vulnerability scanning, and hardening techniques.
• Knowledge of red team tools such as nmap, wireshark, Metasploit, and password crackers.

• Interview Process: 1 round, Teams (video required)
• Work Location:
  
  Role is hybrid (1 day onsite per week)
• Candidate location:
  Candidate must be a CURRENT SC resident. No relocation allowed.

Call  Ext 100 for more details. Please provide Requirement  while calling.

EOE Protected Veterans/Disability