Shift: Friday – Monday, 10:30am – 8:30pm AZ Time (Weekend Shift)
Pay Rate: $40 – $45/HR (W2 Only)
Job/Role Description:
This position provides coverage on a weekend shift schedule (Friday – Monday, 10:30am – 8:30pm AZ Time) in a hybrid work arrangement (2 days in office / 3 days remote) to support the enterprise information security program.
Provide information security consultation to improve awareness and compliance with enterprise information security policies, processes, and standards.
Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management.
Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security.
Identify and direct information asset portfolio reconciliations and certifications.
Provide advanced data aggregation and analysis of information security risk exposure.
Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards.
Review draft and proposed control standards for business impact and recommend modifications or clarifications as required.
Conduct security control testing and consultation with stakeholders.
Evaluate and interpret internal and enterprise information security policies, processes, and standards, and provide recommendations to improve them.
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
Interact with internal customers.
Serve as a mentor to less experienced staff.
Required Qualifications
2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
1+ years of Incident Response Protocols and Tools experience
1+ years experience with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) products
1+ years of Azure, Office 365 or Cloud technologies experience
Experience with Endpoint Detection and Response (EDR) products a plus
Knowledge and understanding of security analytics including incident response and a digital forensics discipline a plus
Knowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, endpoint detection response, and log management solutions a plus
Experience in banking or financial services industry preferred
Experience with host and/or network log analysis as applied to incident response / threat hunting a plus
Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents a plus
Knowledge and understanding of security analytics including incident response and Identity Access Management a plus
Certifications in one or more of the following a plus: Global Information Assurance Certification (GIAC), Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Web Expert (OSWE)
Cloud Certifications such as GCP, AWS a plus
Experience in a 24 x 7 x 365 global security operations center environment preferred
Proven analytical and problem-solving abilities
Strong interpersonal, written, and oral communication skills
Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations
Highly self-motivated and directed
Strong organizational skills
Keen attention to detail
Strong customer service orientation
Experience working in a team-oriented, collaborative environment