JOB DESCRIPTIONS & REQUIREMENTS
Our client is building their Incident Response Team and is seeking multiple contractors to assist in the development through the following responsibilities:
· Getting the physical CIRT up and operational
· Developing process, technology and the (CIRC)center
· Writing policy and documentation, including SOP's
· Reviewing Logs manually going through existing logs until its built (log management)
· Getting the SIEM and correlation rules developed
SIEM: Security, Information & Event Management
· Threat Intelligence, and content development
· Managing active incidents
QUALIFICATIONS
· Technical Incident experience
· Experience in a NOC/SOC/CIRT environment
Also might see it listed as: CSIRT, SIRT, CIRC
· Experience with correlating logs
· Experience with packet inspections and analysis
· Experience with tools including Arcsight, NetWitness or similar:
Argus, Wireshark, Xplico, Damballa, Tcpxtract, Encase, Wild Packets (more network-centric, but may speak to understand packet level traffic. Will want to see tool if the person was using it in a security role)
Best Regards,
Henry Gomez
Professional Recruiter
Information Technology
Tech USA
Office: 610-234-4055
Fax: 610-897-2408
Cell: 301-326-9326
Email: hgomez@techusa.net
Web: www.techusa.net
___________________________
Tech USA is a forward-looking, growing, consulting resource company dedicated to excellence in performance. We provide our business partners with the highest quality, most responsive research, engineering and technical services available in today's complex business environment.
"Only a handful of companies understand that all successful business operations come down to three basic principles: PEOPLE, PRODUCT & PROFIT. Without top people, you cannot do much with the other two"
- Malcolm Forbes
Wednesday, August 10, 2011
[itroundtable] Incident Response Position in Roseland, NJ
__._,_.___
.
__,_._,___
No comments:
Post a Comment