<p>Lob was built by technical co-founders with a vision to make the world programmable.</p>
<p>We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.</p>
<p>As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank"><em>Lob.org</em></a>, and are on a mission to make direct mail more sustainable.</p>
<p>We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.</p>
<p>If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!</p><p>The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. </p>
<p>We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.</p>
<h3><strong>As the Senior GRC and Security Analyst, you’ll…</strong></h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3><strong>What will you bring to this role…</strong></h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
<p>&lt;#LI-REMOTE #LI-RW1</p><p>We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank"><em>We’re also designing a great place to work</em></a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.</p>
<p><strong>Perks</strong></p>
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
<p><strong>Our Commitment to Diversity</strong></p>
<p>Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank"><em>values diversity</em></a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank"><em>backgrounds and perspectives</em></a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank"><em>San Francisco’s Fair Chance Ordinance</em></a>.</p>

United States

Senior GRC and Security Analyst

XOR Security

<h3>Job Description:</h3>
<p><strong>XOR Security</strong> is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. </p>
<p>The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.</p>
<p>In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards</p>
<p><strong>Location:</strong></p>
<p>Washington D.C., USA</p>
<p><strong>Schedule:</strong></p>
<p><strong>6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.</strong></p>
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
<p><strong>XOR Security</strong> offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.</p>
<p><strong>XOR Security</strong> is an Equal Opportunity Employer (EOE). M/F/D/V.</p>
<p><strong>Citizenship Clearance Requirement</strong>Applicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.</p>

Washington

Mid Level SOC Analyst

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The DFIR Consultant will contribute to Avertium’s DFIR practice, implement and execute best practices for incident handling, investigation and reporting, continuously develop the skills and expertise required to achieve customer objectives, and work with customers and other partners to respond to incidents, identify root causes, recommend solutions, and recover compromised environments.
<h3>Responsibilities:</h3>
<ul>
<li>Lead incident response engagements. Understand client requirements, coordinate the incident response team and liaising with client’s business stakeholders and technical teams.</li><li>Liaise with client third parties including legal, insurance and service providers, and provide guidance and subject matter expert advice to customer</li><li>Advise clients on business, technical, regulatory and reputation risk.</li><li>Advise clients on strategies to contain incidents and limit business impact of cyber incidents</li><li>Advise other incident response team members on strategies and techniques to accomplish client objective</li><li>Collect technical evidence from clients’ environments to prepare for forensic investigations</li><li>Conduct forensic investigations to determine the scope and impact of cyber incidents</li><li>Determine root cause of incidents using available evidence and analytical tools</li><li>Determine scope of data access and exfiltration</li><li>Provide recommendations and guidance to successfully evict threat actors from customer environments</li><li>Gather intelligence on threat actors to inform recommended containment, remediation and recovery actions</li><li>Develop threat intelligence reports and briefings in support of Avertium’s CTI and MSS groups</li><li>Manage the recovery of clients’ IT infrastructure during and after cyber attacks</li><li>Brief clients’ management, IT teams and third parties during and after cyber attacks</li><li>Prepare and deliver post-incident reports to client teams</li><li>Conduct threat hunts within EDR and SIEM tools for managed detection and response customers</li><li>Support team members in deeply technical investigations, provides guidance, and practical advice</li><li>Provides thought leadership on the design, and implementation of new detection strategies</li><li>Stays relevant with cyber security threats, counter measures and associated technologies</li><li>Participate in an on-call rotation to provide 24X7X365 client incident coverage</li><li>Identify opportunities to position additive professional and managed services to clients</li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 5+ years of experience with broad background in Cyber Security specifically relating to digital forensics and response.</li><li>Minimum of 3 years of direct experience in digital forensics and incident response</li><li>Dynamic team member able to manage multiple projects simultaneously</li><li>Highly capable communicator able to relate technical concepts to business stakeholders</li><li>Advanced cyber certifications including GCIH, CISSP, CISA, CEH, ECIH and/or technology-specific certifications such as MCSE, CCNA are preferred</li><li>Skills:</li><li>Conversant in many areas of cyber security and learns new concepts quickly</li><li>Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis (including network attack vectors and YARA RegEx), web security or security engineering</li><li>Strong working knowledge of common security tools, such as a SIEM, AV, scanners, proxies, WAF (policies rules, process and workflow), netflow, IDS or forensics tools</li><li>Strong interpersonal and leadership skills when building credibility as a peer as well as in presenting analytical data effectively to varied (including executive) audiences</li><li>Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&amp;CK Framework</li><li>Strong understanding of cloud technologies and related security best practices. Experience handling security incidents in the cloud.</li><li>Firm understanding of endpoint and network-based security solutions, including EDR, firewalls, proxies and email security gateways</li><li>A solid grasp of networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, SMB, and distributed networks)</li><li>Proficient in network forensics including PCAP analysis, network security, and IDS/IPS analysis</li><li>Able to recognize common attack vectors such as recon scans, botnet, malware, command and control activity (C2), worms, trojans, and viruses</li><li>Experience with common operating systems, such as Linux, both from a forensic and threat hunting point of view.</li><li>Strong understanding of relevant laws and regulations (e.g. HIPAA, CCPA, GDPR, PCI, etc) as related to cyber incident handling and remediation</li><li>#LI-CS1</li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Digital Forensics &amp; Incident Response Consultant | Remote, USA

ID.me

<h3><strong>Company Overview</strong></h3>
<p>ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.</p>
<p>The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.</p>
<p>ID.me is a credential service provider compliant with federal standards for digital identity verification. </p>
<p>In addition to helping people control their credentials and data, the company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. The company offers multiple pathways to verification – online self-serve, live video chat agents, and in person. ID.me is passionate about building a robust identity network that does not compromise access for traditionally underserved groups.</p><h3><strong>Role Overview</strong></h3>
<p>ID.me is looking for a <strong>Senior Security Engineer</strong> to add to our rapidly growing security team. If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem. We are seeking a talented Senior Security Engineer who enjoys the challenges of planning, implementing, and upgrading security measures and controls, to include: Cloud Security and Automation, Security Information and Event Management (SIEM) tools, Intrusion Detection and Prevention Systems (IDS/IPS), enterprise security, and other associated tools. </p>
<p>The Senior Security Engineer will also have the opportunity to innovate by building tools to help create a highly integrated security environment, and see around corners. The team owns the end-to-end security of all systems and data for ID.me, and our Security Engineers are passionate about security and working in a fast-paced, ambiguous environment.</p>
<h3><strong>Responsibilities</strong></h3>
<ul>
<li>Defend systems against unauthorized access, modification, and/or destruction</li>
<li>Contribute to security architecture and operations</li>
<li>Design, deploy and optimize security tools such as a SIEM, IDS/IPS, EDR, firewalls, etc</li>
<li>Troubleshoot systems to determine the root cause of issues impacting security infrastructure</li>
<li>Act as an escalation point for security analyst and a resource during incident response</li>
<li>Lead security integration and automation to improve detection, monitoring, and response</li>
<li>Collaborate with cross-functional groups such as DevOps, Software Engineering, etc</li>
<li>Build security orchestration and automation tools to improve preventative and detective controls</li>
</ul>
<h3><strong>Ideal Qualifications</strong></h3>
<p>The qualifications below are ideal, but not all are required.  We encourage candidates to apply if they satisfy some, but not all of the qualifications.</p>
<ul>
<li>7+ years of experience in information security</li>
<li>5+ years experience engineering, implementing, and optimizing security measures for the protection of systems, networks, and information</li>
<li>3+ years of experience supporting a Security Operations Center (SOC) or similar</li>
<li>Hands on experience with SIEM and centralized logging technologies (e.g. Splunk, Elastic, etc)</li>
<li>Experience with Security Orchestration, Automation, and Response (SOAR)</li>
<li>Strong capabilities leveraging scripting languages to automate work or build features (Bash, Python, and/or Ruby)</li>
<li>Experience securing cloud environments such as AWS, GCP, and/or Azure</li>
<li>Experience with configuration automation platforms (e.g. Chef, Ansible, Puppet, Salt, etc)</li>
<li>Bonus: Experience with Information Security Compliance, (SOC, FedRAMP, ISO, etc)</li>
<li>Bonus: Industry security certifications, such as GCIH/ECIH, Security+, or related</li>
</ul>
<p>Ideal candidate will thrive in the following culture:</p>
<ul>
<li>Must have an obsession for building quality products </li>
<li>Ability to thrive when there are changing priorities and shifting of gears</li>
<li>Strong oral and written communication skills</li>
<li>Must be a team player with a strong, self-managing work ethic</li>
<li>Must be a self-starter with a passion for security, learning and continuous improvement</li>
</ul>
<p>Note that candidates must be located in the continental U.S.</p>
<p><strong>ID.me Covid Vaccination Requirement</strong></p>
<p>ID.me has a mandatory vaccination requirement where not prohibited by applicable federal or state law.</p>
<p>All current and future employees are required to receive their COVID-19 vaccinations, unless a reasonable accommodation is approved. Employees not in compliance with this policy will be placed on leave and will be terminated if no valid reason for not getting the COVID-19 vaccine is provided.  </p>
<p>Purpose: In accordance with ID.me's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from COVID-19 that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.</p>
<p>Reasonable Accommodation: Current and future employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must submit a completed Request for Accommodation form to the human resources department to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced (September 13th) and an offer of employment has been made. Accommodations will be granted where they do not cause ID.me undue hardship or pose a direct threat to the health and safety of others.</p>
<p><strong>Vision:</strong> To be the world's leading digital identity network empowering people to control their own information and to prove their credentials across all channels: online, call center, and in-person.</p>
<p><strong>Mission:</strong> To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost.</p>
<p><strong>People: </strong>We have an audacious mission. We aim to fix the identity layer of the internet. Billions of people will live better lives with more trust and convenience thanks to <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>. We are like Special Forces. We take on the most difficult challenges with amazing teammates. </p>
<p><a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank"><strong>ID.me</strong></a><strong> Core Values: </strong>*Don't be a jerk. *Always compete. *Ask questions like a 5-year old. *Inspire people with your passion. *Make something better every day. *Treat each customer like your favorite family member. *Own your mistakes so you can learn from them. *Details are everything. *Communicate like a scientist. *Be truthful (even when it's hard). *Reflect <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>'s values in your actions. *Act like an owner.</p>
<p>ID.me Career Site &amp; Culture Deck: <a href="https://www.id.me/careers" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.id.me/careers</a></p>
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations.
 
Please review our Privacy Policy, including our CCPA policy, at <a href="http://id.me/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">id.me/privacy</a>. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
 
ID.me participates in E-Verify.
 

#LI-JS1
#LI-REMOTE

Senior Security Engineer (Remote)

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The CyberSecurity Analyst is a trusted technical advisor working with an active Center of Excellence. The CS Analyst works closely with the client to provide proactive support assistance to reduce or prevent security issues from occurring on the client network.  The CS Analyst will administer and maintain security measures focused on application, web and infrastructure security for the client. The CS Analyst is responsible for working with key client contacts at multiple levels of the organization to identify and align business and IT Security objectives.  The CS Analyst will provide security analytics and assistance with security support requests. 
<h3>Responsibilities:</h3>
<ul>
<li>Monitor, respond to, and analyze SIEM alerts from monitoring tools. </li><li>Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products.  Handles daily incidents; monitors, tracks, analyzes and records. </li><li>Work with vendors, outside consultants, and other third parties to improve information security within the organization. </li><li>Responds to security related tickets escalated from clients, and works collaboratively with the client to assist in resolving security events. </li><li>Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware. </li><li>Monitor security vulnerability information from vendors and third parties. </li><li>Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables. </li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner. </li><li>CISSP, CISA or GIAC certification is a plus. </li><li>A minimum of 2-4 years of experience working with Microsoft Active Directory. </li><li>Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred. </li><li>Analyze and resolve complex technical and business problems. </li><li>Must have proficient knowledge with three or more of the following technologies:  Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX &amp; Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware </li><li>Knowledge with NIST, FISMA, DIACAP. </li><li>Knowledge of Windows 2003-12 server platforms. </li><li>Knowledge of VMware and VM server platforms. </li><li>Knowledge of UNIX server platforms. </li><li>Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows. </li><li>Web and mail logged events. </li><li>Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports). </li><li>Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns. </li><li>Ability to troubleshoot Windows Event IDs. </li><li>Interact with all levels of management. </li><li>Make decisions based on many variables. </li><li>Manage multiple tasks/projects simultaneously. </li><li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience. </li><li>Advanced network and systems certifications such as CCNP, CCNA and CISSP, are preferred. </li><li>Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint are a plus. </li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Knoxville

CyberSecurity Analyst, Cyber Fusion Team, MSS | Knoxville, TN

Apply to IPS Cyber Security Jobs in companies remotely and near you. New IPS Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
Digital Forensics & Incident Response Consultant \| Remote, USA at Avertium	Remote Full Time Forensic Consultant Incident Response
Senior Security Engineer (Remote) at ID.me	Remote Full Time Analyst Incident Response Ansible
CyberSecurity Analyst, Cyber Fusion Team, MSS \| Knoxville, TN at Avertium	Full Time Analyst Contract Windows Active Directory

IPS Cyber Security Jobs

0 IPS Cyber Security Jobs. Page 1 of 1

5 closed ips cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

IPS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

IPS Cyber Security Jobs

0 IPS Cyber Security Jobs. Page 1 of 1

5 closed ips cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

IPS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter