Computer Security System Specialist – Level I

Role Summary
This role requires a seasoned security analyst responsible for detecting and examining security intrusions across various network and system environments. The position involves analyzing extensive log data from multiple sources, including network traffic, web servers, and intrusion detection systems, to identify potential security threats. The ideal candidate will have at least three years of senior-level experience in cybersecurity analytics, with a strong focus on SIEM tools and log review procedures.

Responsibilities

• Perform in-depth analysis of security logs from wide area networks, web servers, and other virtual environments to identify anomalous activities.
• Review and interpret network IPS/IDS/HIPS traffic events, including Snort-based IDS alerts and raw pcap data.
• Utilize Splunk SIEM for advanced log querying, creating custom queries and alerts to enhance security monitoring.
• Conduct firewall ACL reviews to ensure appropriate access controls and security policies are in place.
• Analyze web server logs and raw data logs to identify potential vulnerabilities or breaches.
• Collaborate with cybersecurity teams to develop and implement incident response strategies.
• Document findings clearly and communicate security issues effectively both orally and in writing.
• Maintain a current understanding of emerging security threats and best practices in intrusion detection.
• Support the development of security policies and procedures based on findings from log analysis.
• Keep current with advancements in security technologies and logging tools to improve detection capabilities.

Qualifications

• Minimum of three years of senior-level experience in cybersecurity, focusing on intrusion detection and log analysis.
• Proficiency with Splunk SIEM and advanced querying techniques.
• Strong knowledge of network security technologies, including IDS/IPS/HIPS, firewall ACLs, and raw data logs.
• Experience with web and server log analysis, Snort-based IDS, and packet captures (pcaps).
• Excellent verbal and written communication skills.
• Ability to develop complex query methods and advanced grep skills for log examination.
• Working knowledge of security event review in SIEM environments.
• Availability to work on-site.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Publishing Pay Range: $55.00 – $60.00 USD Hourly

This position is based in office and requires employee to work on-site.