Description
Cyber Security Consultant - Splunk, McAFee, ArcSight, SNOW, CISSP is required by my client who is based in Plymouth, Devon
My client requires a flexible, Cyber Security Consultant to perform deep-dive incident analysis by correlating data from various sources. The successful applicant will also determine if a critical system or data set has been impacted or is being attacked and will advise on remediation actions. The analyst will be responsible for coordinating the response for minor incidents and supporting the CSOC manager in dealing with major incidents. The candidate must be prepared to work a shift pattern once the CSOC is operational.
ESSENTIAL:
1. Have a strong IT technical background and experience working in a SOC environment.
2. Has functional knowledge and experience of using tools for security monitoring (eg Splunk, QRadar, Intel McAFee, ArcSight, RSA NetWitness), data analytics (eg ELK stack) and security case management (eg SNOW).
3. Knowledge of or experience in vulnerability management tools (eg Qualys, Nmap, Nessus, Nexpose)
4. Functional knowledge of TCP/IP protocol suite, LAN/WAN technologies, switching, routing, VoIP and Telephony technologies, Firewalls and VPN, intrusion prevention systems (IPS), vulnerability assessment and patch management tools.
5. Functional knowledge of UNIX, Linux, Apple and Windows technologies.
6. Functional knowledge of operating protocol analysers and analysing output.
7. Functional experience performing monitoring, analysis and recovery procedures.
8. Functional experience performing deep-dive incident analysis by correlating data from various sources.
9. Knowledge of targeted cyber attack (APT), how to analysis these and respond to and mitigate against the attacks.
10. Active CISSP, SSCP, SANS certifications, Security or equivalents.
11. Knowledge of Service Now.
Mercator IT Solutions provides services as an agency and an employment business