Vacancy expired!
A-TEK is currently recruiting a Systems Security Engineer to support our work with the National Library of Medicine (NLM). You will join NCBI's team of scientists and engineers to deliver high-quality IT solutions to tackle the most challenging healthcare information technology issues.
The Systems Security Engineer supports cybersecurity monitoring, threat analysis, incident response, and infrastructure remediation within and across the NCBI enterprise. These individual captures and refines security requirements and ensure their integration into information technology component products and information systems through purposeful security design or configuration.Responsibilities:- IP and Firewall management.
- Vulnerability/System compliance management.
- Analyze architecture and system functionality for a broad range of technologies.
- Log analysis for incident remediation/threat hunting.
- Troubleshooting security and network problems.
- Provide support in the areas of information assurance, vulnerability assessment, enterprise protection planning, security monitoring, incident response, cyber security, and cyber threat analysis.
- Participate in formal incident response efforts coordinating responses to major intrusions or exploits. Incident investigations include intrusions, illegal software usage, etc.
- Determine Security Incident Event Management (SIEM) pattern analysis based on threat intelligence feeds
- Bachelor's degree or 4 years of equivalent experience.
- Minimum 2+ years hands on firewall management experience
- Minimum 2+ years hands on vulnerability management experience
- Working knowledge and demonstrated experience in network design, network security, and firewall technologies. Experience with Fortinet, Symantec endpoint protection, and Arista/Cisco ACLs preferred.
- Experience with testing and identifying network and system vulnerabilities using tools such as Tenable.SC and BigFix.
- Experience with log analysis.
- Experience with Splunk preferred.
- Good understanding of computing security, authentication techniques, operation procedures and general practices in an enterprise IT infrastructure.
- Demonstrated self-initiated ability for analyzing, debugging, and tracking security issues.
- Identifies problems, determines the accuracy and relevance of information, and uses sound judgment to generate and evaluate alternatives, and to make recommendations.
- Excellent organization and time management skills and ability to identify priorities as needed to accomplish a variety of tasks.