SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.)Must be capable of analyzing security logs and events from the following types of devices such as, but not limited to: Firewalls (FWs), Intrusion Detection Sensors/Intrusion Prevention Sensors (IDS/IPS), Host-based Intrusion Detection System/ Host-based Intrusion Prevention System (HIDS/HIPS), proxy/web filter, vulnerability scans, routers, router Internet Protocol (IP) accounting systems (i.e., Cisco NetFlow), Virtual Private Network (VPN) gateways/concentrators, server event logs, e-mail and host anti-virus, desktop security monitoring agents, anti-virus servers, IP services (i.e. Domain Name System (DNS) Services, Dynamic Host Configuration Protocol (DHCP), network address translation devices, MDM (e.g. This includes the identification of malicious code present within a computer system as well identification of malicious activities that are present within a computer system and/or enterprise networkExperience working with a ticket management system to collect, document and maintain information pertinent to security investigations and incidentsExcellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefingsExperience in monitoring the operational status of monitoring components and escalating and reporting outages of the componentsConceptual understanding of Windows Active Directory is also desiredExperience working with various event logging systems and must be proficient in the review of security event log analysis.