Information Security Analyst

Willkie Farr & Gallagher LLP is an international law firm seeking an Overnight Weekend Information Security Analyst to support its Information Technology Team. The role supports the maintenance and development of the global information security program, manages security tools and processes, investigates security events, monitors systems, and provides overnight weekend security operations coverage.

Responsibilities:

• Assists with investigations of security events to determine malfunctions, breaches, and remediation steps
• Monitor systems to identify and respond to anomalous activity such as worms, Trojans, viruses, and malware
• Responsible for operation of vulnerability assessment tools, scanning, researching and analyzing vulnerabilities
• Serve as the primary security operations resource for overnight weekend coverage
• This role will also provide cross-functional support by delivering coverage for the NOC as needed, ensuring continuity of operations and timely response
• Research the latest IT security trends, attack vectors, and methodologies; understand the countermeasures in the industry and engage with stakeholders to resolve identified vulnerabilities within SLAs
• Participate in a 24x7 Incident Response Team and available to work evenings and weekends as needed

Requirements:

• 2-5 years of experience in Information Security with experience in large scale vulnerability and threat management program
• Hands-on experience in designing and implementing technical solutions of IT Security tools at the enterprise level - e.g. AV, FW, SIEM, IDS/IPS, web and email content filtering, Vulnerability Management Tools, etc
• Demonstrated experience in vulnerability management, including working with vulnerability management tools such as Qualys, Tenable, Rapid7 etc
• Experience with SIEM technologies, including administration and analyst operation of SIEM within SOC functionality identifying relevant threats, recommend corrective actions, summarizing and reporting results
• Knowledge of networking components and various operating systems and cloud environments and understanding their security principles and technologies
• Bachelor's Degree and current industry Certifications
• Understanding of common security device functions, such as IDS/IPS, Network and Host-based firewalls, DLP (Data Leakage Protection), encryption, endpoint security
• Understanding of malware, emerging threats, attacks, and vulnerability management
• Excellent communication skills, troubleshooting and analytical thinking skills, self-driven, multi-tasking, work collaboratively in a team environment, and willingness to adapt to change in dynamic, global environment are critical
• Certified Information System Security Professional - CISSP
• Scripting experience with Python, Powershell etc
• SANs GIAC
• Certified Ethical Hacker – CEH
• Cisco certified Network Associate - CCNA
• Cisco Information Security Specialist (CQS)
• Cisco Certified Firewall Specialist – CQS
• Cisco IPS Specialist (CQS)