Beschreibung
Task:• Provide status reporting of team activities against the program plan or schedule
• Provide guidance to the team based on management direction
• Consultation SIEM infrastructure and associated tooling
• Develope new SIEM use cases, support and maintain existing content
• Work with internal customers on SIEM on-boarding
• Assist and train junior team members in the use of security tools, the preparation of security reports and
the resolution of security issues
• Follow pre-agreed work procedures and applies pre-approved changes to prevent damage and
mitigate outage risks
• Correlate and coordinate events across all activities in above sections
• Provide RUN support for security technologies (SIEM, Anti-DDoS), handle incidents, perform changes, etc.
• Reactive assistance in root cause analysis
• Provide security incident reports to customers and management
Requirements (Must have):
• Experience with managing at least one SIEM technology (Arcsight, QRadar...)
• Experience with development of SIEM content
• Very good TCP/IP knowledge
• Good Knowledge of higher level protocols (HTTP, HTTPS, FTP, DNS, …)
• Fluent Linux administration
• Fluent Windows administration
• Basic scripting (BASH, Python...)
• Good understanding of security technologies (Antivirus, Firewall, IPS...)
• Good understanding of common cyber attack principles
• Good overview of Information Security topics (encryption, authentication, vulnerability management
etc.)
• Good English language skills
• Decision-making skills
• Experience in Information Security field
Nice to have:
• Telecoms experience
• Good knowledge of at least one IPS technology (Snort, CheckPoint, etc.)
• Knowledge of Web Application Firewall technology
• Penetration testing and forensics skills
Environment/Miscellaneous:
full-time
Beginn: 01.01.2019
Dauer: 30.06.2019
Branche: Logistik/Transport