The #1 Site for IT and Engineering Jobs - search all IT and Engineering  jobs.
Mjp1vl6v1qfgrqpyz7r

Network Security Engineer – IV

Job Description

Description:

•         'Government Network Security and Operations Center (GNOSC) 
Floor Operations Lead Engineer - Security 

•         Your primary responsibility is to ensure GNOSC (Government Network Operations and Security Center) customers receive professional service and prompt response to their needs.

•         You will support the 24x7 Floor Operations / Service Desk function for our managed security service customers – this means initiating and working Incident Management tickets, responding to trouble calls/emails from customers, and ensuring proper work flows/assigning trouble tickets to Specialists and other employees. As Lead, you provide first level security incident handling (60%) - also act as points of escalation for Managed Security Services Specialists (10-20%). Assess changes – Security Analysis and Incident response 50/50

•         Security incident handling involves investigating issues to determine if there is a real security incident or a false positive, notifying customers as needed, and sending customers standardized emails specifying the steps they need to take to fix the problems.

•         You are often the first to see an issue, or the issue may have been escalated from another team/management. 

•         Device and health monitoring involves troubleshooting network connectivity problems concerning managed security devices, often time working with Advanced Support Team engineers and/or vendors/partner technology teams on device replacement/reconfiguration. 

•         Focus on SLA attainment for your shift by ensuring ticket buckets have been ''scrubbed'' and that issues are followed through until completion or escalation. 

•         Prepare Shift turnover and Shift Report to ensure continuous smooth continuous workflows between shifts. 

•         Support USARC Customer Audits 

Job Requirements

•         Update and Maintain process documents as needed 

•         Respond to security threats raised through the correlation and analysis of security events from sources such as firewalls, IDS/IPS devices, packet captures and security logs to include blocking IP addresses at the perimeter firewalls with near real-time response. 

•         Interpret and explain PCAP data and firewall logs

•         Work with a USARC customer supporting STIG, POAM, ATO and CTO Certification and remediation plans

•         Assess network changes for vulnerabilities. Address Incidents/Scenarios dealing with PII, Information Spills and Stolen Assets. Address Insider Threat, Malware and Policy Violations following USARC Policy. 

•         Roles include performing security analytics of network traffic and providing Incident Response per USAR

Guidelines to the entire USAR community utilizing the following: 

1. Payload analysis (packet analysis) 
2. Health/alert monitoring (HM/AM) 
3. Arcsight 
4. Splunk 
5. Sourcefire 
6. BlueCoat 
7. FireEye 

Job Snapshot

Location US-NC-Cary
Employment Type Full-Time
Pay Type Year
Pay Rate N/A
Store Type Engineering & Aerospace
Apply

Company Overview

American Cybersystems, Inc. (ACS Group)

ACS Group provides services to Fortune 1000 companies across various industry verticals. With a proven track record of managing project demands while improving the efficiency, productivity and profitability of new and existing projects through process improvement, ACS Group is consistently recognized for identifying and implementing strategic solutions that create and preserve long-term business value. Learn More

Contact Information

US-NC-Cary
Manish Kumar
952-838-2921
Icon-social-facebookIcon-social-linkedinIcon-social-twitter
Snapshot
American Cybersystems, Inc. (ACS Group)
Company:
US-NC-Cary
Location:
Full-Time
Employment Type:
Year
Pay Type:
N/A
Pay Rate:
Engineering & Aerospace
Store Type:

Job Description

Description:

•         'Government Network Security and Operations Center (GNOSC) 
Floor Operations Lead Engineer - Security 

•         Your primary responsibility is to ensure GNOSC (Government Network Operations and Security Center) customers receive professional service and prompt response to their needs.

•         You will support the 24x7 Floor Operations / Service Desk function for our managed security service customers – this means initiating and working Incident Management tickets, responding to trouble calls/emails from customers, and ensuring proper work flows/assigning trouble tickets to Specialists and other employees. As Lead, you provide first level security incident handling (60%) - also act as points of escalation for Managed Security Services Specialists (10-20%). Assess changes – Security Analysis and Incident response 50/50

•         Security incident handling involves investigating issues to determine if there is a real security incident or a false positive, notifying customers as needed, and sending customers standardized emails specifying the steps they need to take to fix the problems.

•         You are often the first to see an issue, or the issue may have been escalated from another team/management. 

•         Device and health monitoring involves troubleshooting network connectivity problems concerning managed security devices, often time working with Advanced Support Team engineers and/or vendors/partner technology teams on device replacement/reconfiguration. 

•         Focus on SLA attainment for your shift by ensuring ticket buckets have been ''scrubbed'' and that issues are followed through until completion or escalation. 

•         Prepare Shift turnover and Shift Report to ensure continuous smooth continuous workflows between shifts. 

•         Support USARC Customer Audits 

Job Requirements

•         Update and Maintain process documents as needed 

•         Respond to security threats raised through the correlation and analysis of security events from sources such as firewalls, IDS/IPS devices, packet captures and security logs to include blocking IP addresses at the perimeter firewalls with near real-time response. 

•         Interpret and explain PCAP data and firewall logs

•         Work with a USARC customer supporting STIG, POAM, ATO and CTO Certification and remediation plans

•         Assess network changes for vulnerabilities. Address Incidents/Scenarios dealing with PII, Information Spills and Stolen Assets. Address Insider Threat, Malware and Policy Violations following USARC Policy. 

•         Roles include performing security analytics of network traffic and providing Incident Response per USAR

Guidelines to the entire USAR community utilizing the following: 

1. Payload analysis (packet analysis) 
2. Health/alert monitoring (HM/AM) 
3. Arcsight 
4. Splunk 
5. Sourcefire 
6. BlueCoat 
7. FireEye 

Sologig Advice

For your privacy and protection, when applying to a job online: Never give your social security number to a prospective employer, provide credit card or bank account information, or perform any sort of monetary transaction.Learn More

By applying to a job using sologig.com you are agreeing to comply with and be subject to the workinretail.com Terms and Conditions for use of our website. To use our website, you must agree with theTerms & Conditionsand both meet and comply with their provisions.
Network Security Engineer – IV Apply now