Role: Senio Network Security Analyst 3
Duration: 8 months duration
Location: Austin, TX 78744 (This position requires an onsite presence 4 to 5 days per week. Candidates must reside in the Austin area and be authorized to work in the United States.)
Primary Skills: Network Security monitoring and incident response tools and Administration (EDR, Scanners, SIEM, NetFlow, etc)
The clients work to be accomplished:
The client has an existing Tenable scanning solution that requires fulltime staff to support operation and management. Staff Augmentation provider will provide a minimum of two (2) Tier 3 engineers to support the following functions:
- Ensuring the solution is configured to the client's requirements
- Scans are configured to scan all devices in the client environment
- Perform both credentialed and un-credentialed scans in accordance with agency security policies and standards
- Identify software installed on scanned systems with known vulnerabilities
- Perform targeted scanning to identify specific vulnerabilities within the client environment
- Identify rouge devices after each scan and notify the client IT Operations and applicable service providers a minimum of monthly rogue devices are those devices that are scanned but not identified as legitimate assets in the client environment
- Notify the client IT Operations and applicable service providers of any identified vulnerabilities and misconfigurations in a method determined by the client.
- Advise the client IT Operations and applicable service providers on methods to reduce vulnerabilities and misconfigurations.
- Advise the client IT Operations and applicable service providers on methods to refine the client patching process to ensure that results of the scans are communicated to the appropriate operational teams responsible for ensuring vulnerabilities and misconfigurations and ensure they are mitigated or remediated in accordance with agency policy.
- Coordination with the team members building configuration baselines
- Administration of the Tenable application including coordinating with operational team for patching.
Minimum Yrs of Experience, Skills, and Qualifications
- 8 Years of Deployment and configuration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, NetFlow, etc)
- 8 Years of Administration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, NetFlow, etc)
- 8 Years of Participation and experience in intrusion detection and incident response activities
- 8 Years of Effective, professional business communication and reporting