Total 20 system analyst job vacancies in Legal / Public / Security category in George Town

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

The Role:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

It is great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Accountabilities:

· Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause.

· Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.

· Execute SOC playbooks, knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.

· Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.

· Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

· Prepare SOC monthly reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.

· Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

The Individual and their Experience:

· Candidate should have at least 3 years of experience working in SOC and MSS environments, with a Bachelor’s degree in Computer Science/IT/Information security.

· Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, IBM QRadar.

· Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, CrowdStrike.

· Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

· Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.

· Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.

· Candidate should have at least one cybersecurity industry certification such as CEH, CHFI.

· Good understanding of basic network concepts and advantage if exposure to cloud technologies.

· Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The Information Security Analyst (ISA) will provide information security risk support and cybersecurity expertise to the business segments. The support will take the form of operational risk analysis and assessments through the demand management and request tracking tools, consultancy, policy and standards best practice guidance, and process improvements. The ISA will be required to work with project teams, service providers, and business units internal and external to the IT function. The candidate is expected work with leadership and guidance from the Information Security Officer’s and/or the Lead Information Security Analyst, to support and influence technology and business personnel regarding the value and methods of safeguarding information, applications, systems, infrastructure, and work practices are optimized so that the information risks are properly managed.
The Information Security Analyst provides support to the Information Security Officer in managing the organisation-wide Technology, Governance, Risk and Compliance function (IT GRC) within the Office of the Chief Information Security Office.

Location: Hybrid - Cape Town | Johannesburg | Durban

• To support and shape the Information/Cybersecurity initiatives and support business segments in the implementation and execution of the Information/Cybersecurity framework, policies, and reporting of all segment specific Information/Cybersecurity elements.
• Analyse business impact and exposure based on emerging security threats.
• Work closely with information security officers, architects, functional area specialists, and other security staff to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements.
• Support and document security assessments relating to IT security and risk management compliance, driven by the Lead Information Security Analyst.
• Support the integration of the business-related security risk requirements into the broader governance structures, by initiating relevant discussions, and ensuring the evidencing of key risk-related decisions.
• Log, track and manage risks and report risk trends, opportunities and remediation status monthly.
• Create, log requests and report tasks necessary to continuous improvement and evolution of security services.
• Manage stakeholder requests ensuring strong relationships are built and maintained. Instil confidence across the business that information security risks are identified and mitigated.
• Assist with the creation of processes and process improvement to ensure smooth execution of risk processes with minimal burden on stakeholders..

Role Requirements

• Relevant tertiary (3yr) qualifications in a IT risk discipline required
• A certification from ISACA (CISA), ISC2 (SSCP) is advantageous
• 2 - 4 years relevant industry experience IT risk management or security role.
• Experience within the Insurance and /or financial services sector advantageous
• Knowledge of IT risk management principles and practices
• Understanding of IT Governance, and technology and life cycle development processes (SDLC, technology operations, business continuity, etc).
• Broad knowledge of range of standards, frameworks and methodologies— for example, International Standards Organization (ISO) 27001/2, NIST Cyber Security Framework, IT Infrastructure Library (ITIL), COBIT
• Excellent Written and oral communication skills
• Strong facilitation, negotiation and conflict resolution skills
• Strong Analytical and problem solving skills

Skills

Education

Closing Date

26 March 2024

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

Old Mutual Limited is pro-vaccination and encourages its workforce to be fully vaccinated against Covid-19.

All prospective employees are required to disclose their vaccination status as part of the recruitment process.

Please refer to the Old Mutual’s Covid-19 vaccination policy for further detail. Kindly note that Old Mutual reserves the right to reinstate the requirement to vaccinate at any point if it is of the view that it is imperative to do so.

The Old Mutual Story!

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs. The selected candidate shall provide a stabilizing force to the high intensity, high tempo operations center. In depth technical knowledge, management, and analytic skills address senior command requirements, subordinate command information requirements, as well as supplements operations during a time of need.

Primary Responsibilities

• Provide holistic enterprise defensive strategies for enterprise cyber security capabilities implemented within the infrastructure of the DODIN to include but not limited to Cloud, network boundaries, cross domains, and varying endpoint technologies.

• Provide analysis of architectures, technologies, policies, information and analytic data used to determine prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.

• Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer)

• Perform cyber situational awareness activities and provide analysis and recommendations of situation awareness capabilities.

• Provide enterprise-wide cybersecurity, threat analysis, countermeasures and defensive strategies across a multi-tiered, porous domain inclusive of Cloud, federated regional gateways, cross domain peering points, internet access points, and endpoints.

Basic Qualifications

• Bachelor's degree in a relevant technical discipline and 8+ years of prior relevant experience. 

• Currently possess an active DoD TS/SCI clearance and eligible for C/I Polygraph.

• Currently possess DoD 8750 certification at IAT level II, Security +ce.

• Experience at Joint Command and/or Operations Center.

• In-depth understanding of military orders and the military decision-making process.

• Proficient in Windows Desktop 7/ 8/ 8.1/ 10 

• Knowledge of Windows server 2003/ 2008/ 2012 R2 

• Ability to work in a virtual environment such as Microsoft Teams 

• Knowledge of and a proficiency in using Computer and Microsoft Office applications (Word, Excel, Access, Outlook) 

• Knowledge of policy development and maintenance 

• Strong communication and interpersonal skills, with the ability to speak clearly and effectively with customers and technical personnel in high-stress situations 

• A solid understanding of IP addressing and subnetting 

• Understanding of key network monitoring protocols 

• Proficient in Microsoft Office 365 Suite • Knowledge of Microsoft server operating systems, VMWare and Cisco network devices

Preferred Qualifications 

• Senior leader engagements

• Experience with DISA and DoD Networks

• Experience with technical and/or military writing

Original Posting Date:

2024-03-13

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Original Posting Date:

2024-03-13

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Original Posting Date:

2024-03-13

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $122,200.00 - $220,900.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Only for Singaporeans/PR's

Leidos has an excellent opportunity for an experienced, self-directed, Cyber Security Analyst, located in Stuttgart, Germany.   
 
PROGRAM SUMMARY:
This program provides critical Communications and Information Technology Services to support U.S. Africa Command, U.S. European Command, Combined Joint Task Force - Horn of Africa, Southern European Task Force, and associated staff elements and organizations.  It provides our war fighters support in their mission to keep threats and vulnerabilities as low as possible by ensuring their computer network is stable, undisrupted and secure. This will require some OCONUS travel.

PRIMARY RESPONSIBILITIES:
•Provide technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures, which includes all hardware and software tools and sensors from perimeter to endpoint. 
•Review security threats and determines/implements effective countermeasures IAW established policies/regulations/directives. 
•Analyze network or system changes/reconfigurations for security impacts (performs risk analysis/assessment). 
•Monitor implemented security controls and report status. 
•Compile information and support required cyber evaluations, inspections, assessments, and reporting tasks. 
•Develop recommendations for counter measures or process improvement based on lessons learned from security incidents. 
•Provide exceptional technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures which includes all hardware and software tools and sensors from perimeter to endpoint.   
•Reviews security threats and determines/implements effective countermeasures IAW established policies/regulations/directives. 
•Analyzes network or system changes/reconfigurations for security impacts (performs risk analysis/assessment). 
•Compile information and support required cyber evaluations, inspections, assessments, and reporting tasks. 
•Work in dynamic fast paced environments that require team interaction and coordination of efforts.   
•Interface with both client managers and system users. 
•Operate tools and systems that are required to support the Command's cybersecurity program. 
•Provide STIG Assessment to multiple Operating Environments. 
•Assist in the enhancement of AFRICOM's Cyber Threat Capability. 
•Provide focused operations/threat analysis on known intrusion sets. 
•Provide remote support and/or travel to customer sites as required. 
 
BASIC QUALIFICATIONS:
•BA/BS + 3 years recent specialized or AA/AS +5 years recent specialized or a major cert +7 years recent specialized or years of recent specialized experience 
•DOD 8570 IAM III compliance, CISM, CISSP (or Associate) GCED, GCIH.
•Working knowledge of supporting Operating Systems: Windows Server 2016/2019, Windows 10, VMWare vSphere, and Red Hat Enterprise Linux.
•In-depth experience with DoD IT security requirements. 
•TESA eligibility 
•Currently hold an adjudicated Top Secret/SCI Clearance. 

PREFERRED QUALIFICATIONS:
•ITIL v3 – Foundation.
•Experience with Bluecoat, McAfee HBSS, Splunk, CyberArk and Bitlocker, ACAS.
•Automation using Microsoft PowerShell, VBScript, or batch files.
•Adaptable to changing circumstances and operational needs.
•Understanding of Department of Defense Military standards. 

CITS3

Original Posting Date:

2024-03-04

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $65,000.00 - $117,500.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in CA-CIB. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN)
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

The Role:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

It is great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Accountabilities:

· Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause.

· Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.

· Execute SOC playbooks, knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.

· Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.

· Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

· Prepare SOC monthly reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.

· Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

The Individual and their Experience:

· Candidate should have at least 3 years of experience working in SOC and MSS environments, with a Bachelor’s degree in Computer Science/IT/Information security.

· Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, IBM QRadar.

· Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, CrowdStrike.

· Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

· Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.

· Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.

· Candidate should have at least one cybersecurity industry certification such as CEH, CHFI.

· Good understanding of basic network concepts and advantage if exposure to cloud technologies.

· Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN.  GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs.  The selected candidate shall support the detection, monitoring, correlation, remediation, and prevention of cyber threat activity targeting the DODIN. Understand the details of advanced persistent threats that impact the DODIN with an in-depth knowledge and ability to analyze, track, correlate, trend, and report on the TTPs utilized and countermeasures to secure, operate and defend.

Primary Responsibilities

• Supervise the analyzing of identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Assess network topology and device configurations identifying critical security concerns and providing security best practice recommendations.
• Review, correlate, and report on high priority endpoint threats and vulnerabilities to identify similar incidents/events, malicious tradecraft, TTPs of malicious activity, and indicators utilized to impact or target specific networks. 
• Supervise the creation of situational awareness products to provide DoD components with detailed information related to vulnerabilities and appropriate mitigation strategies. 
• Develop and Present cyber threat briefings, presentations to ensure situational awareness and current status are conveyed to senior leaders.
• Coordinate with AOs and participate in meetings to ensure accuracy of scoping, requirements documentation, gap identification, remediation, and compliance requirements.
• Develop formalized reporting regarding threat and vulnerability activity impacting mission success. (i.e., situational awareness reports/products; operational directives/orders and coordination messages; and quarterly threat analysis reports and metrics.).
• Develop, and maintain the content of a DoD indicator database to aid in the detection and mitigation of threat activity.
• Define, establish, and manage security risk metrics and track effectiveness.

Basic Qualifications

• BA degree and 12+ years of applicable experience or a MA degree in a related discipline with 15+ years of applicable combined education and experience. Additional related years of experience is accepted in lieu of a degree
• Active DoD TS/SCI clearance and eligible for C/I Polygraph
• Must hold an active DoD 8570 IAM Level I/II certification.
• Previous tools experience working with endpoint detection and response tools (ESS, Cisco AMP, Cortex XDR, Forti EDR, Sophos, Carbon Black EDR)
• Technical understanding in some of the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication installation, or malware types).
• Expert knowledge of computer network defense operations (proxy, firewall, IDS/IPS, router/switch, or open-source information collection)
• Expert knowledge of threat and vulnerability analysis, routing protocols, routing, intrusion detection systems, intrusion protection systems, Domain Name Service, or network traffic analysis.
• Advanced communications and presentations skills (verbal and written) enabling precise conveyance of information across all CC/S/A/FA with command and proper enunciation of the English language

Preferred Qualifications

• Security+ CE; CAP, GSLC, CISSP
• ITIL v3 Foundation certified

Original Posting Date:

2024-02-14

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $122,200.00 - $220,900.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

This position will support the DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN. GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DoD and COCOMs. The selected candidate shall provide a stabilizing force to the high intensity, high tempo operations center. In depth technical knowledge, management, and analytic skills address senior command requirements, subordinate command information requirements, as well as supplements operations during a time of need.

Primary Responsibilities

• Provide holistic enterprise defensive strategies for enterprise cyber security capabilities implemented within the infrastructure of the DODIN to include but not limited to Cloud, network boundaries, cross domains, and varying endpoint technologies.

• Provide analysis of architectures, technologies, policies, information and analytic data used to determine prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.

• Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer)

• Perform cyber situational awareness activities and provide analysis and recommendations of situation awareness capabilities.

• Provide enterprise-wide cybersecurity, threat analysis, countermeasures and defensive strategies across a multi-tiered, porous domain inclusive of Cloud, federated regional gateways, cross domain peering points, internet access points, and endpoints.

• Development of operational supporting documents such as SOPs, TTPs and CONOPs.

Basic Qualifications

• Bachelor's degree in a relevant technical discipline and 8 - 12 years of prior relevant experience or master’s degree with 6 – 10 years of prior relevant experience. 

• Currently possess an active DoD TS/SCI clearance and eligible for C/I Polygraph.

• Currently possess DoD 8750 certification at IAT level II, Security +ce.

• Experience at Joint Command and/or Operations Center.

• In-depth understanding of military orders and the military decision-making process.

• Proficient in Windows Desktop 7/ 8/ 8.1/ 10 

• Knowledge of Windows server 2003/ 2008/ 2012 R2 

• Ability to work in a virtual environment such as Microsoft Teams 

• Knowledge of and a proficiency in using Computer and Microsoft Office applications (Word, Excel, Access, Outlook) 

• Knowledge of policy development and maintenance 

• Strong communication and interpersonal skills, with the ability to speak clearly and effectively with customers and technical personnel in high-stress situations 

• A solid understanding of IP addressing and subnetting 

• Understanding of key network monitoring protocols 

• Proficient in Microsoft Office 365 Suite • Knowledge of Microsoft server operating systems, VMWare and Cisco network devices

Preferred Qualifications 

• Senior leader engagements

• Experience with DISA and DoD Networks

• Experience with technical and/or military writing

Original Posting Date:

2024-02-14

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $101,400.00 - $183,300.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos has an excellent opportunity for an experienced and self-directed Cyber Security Analyst to apply their knowledge with Tenable Assured Compliance Assessment Solution (ACAS) and its endpoint products such as Security Center, Nessus Scanner and Passive Vulnerability Scanner (PVS) and impact our nation’s security posture while helping to secure critical IT systems.  This position is in support of a Department of Defense (DoD) organization, US EUCOM located OCONUS in Molesworth, England.  

SUMMARY:
The successful candidate will support the Customer in the design and implementation of Assured Compliance Assessment Solution (ACAS) for the US EUCOM Enterprise Network (AEN), coordinating with internal Information Assurance personnel to maintain and operate the ACAS tool functionality, and operate and maintain the ACAS solution to support network and appliance scanning and configuration assessments.

PRIMARY RESPONSIBILITIES:

• Provide technical expertise to support the Combatant Command (CCMD) cybersecurity program and its functions IAW current architectures, which includes all hardware and software tools and sensors from perimeter to endpoint. 
• Implement and install ACAS (Nessus scanners and Security Centers) on AEN networks
• Provide expert level program management guidance and recommendations, planning, implementation, training, and execution of enterprise support for ACAS and other related tools.  Guidance shall include recommendations for best practice configuration of ACAS organizations, scan repositories, asset lists, scan profiles, etc.
• Provide and maintain a project schedule and a Plan of Action and Milestones (POA&M) document for the ACAS system as needed.
• Assist with automation and implementation of periodic vulnerability reporting from ACAS to other organizations.
• Produce the EUCOM Cyber specific documentation necessary for assessment and authorization of the system to achieve an Authority to Operate (ATO) in accordance with NIST guidelines (e.g. technical diagrams, Concept of Operations (CONOPS), DISA Security Technical Implementation Guidance (STIG) reports, Administrator and User Standard Operating Procedures (SOP) and manuals, training, baseline documentation, etc.).
• Support installation, configuration, and testing of new software releases as directed by the Government. Upon completion of functional testing, the candidate shall deliver a test report that documents test results.
• Communicate clearly and succinctly both written and orally, and present products and ideas in a business-like manner.  
• Work in dynamic fast paced environments that require team interaction and coordination of efforts.  
• Interface with both client managers and system users.
• Assist in the enhancement of EUCOM's Cyber Threat Capability.
• Develop and deliver specific deliverables associated with this support that are identified by the Government.
• Provide remote support and/or travel to customer sites as required.

Required Education and Qualifications:

• BA/BS + 4 years, AA/AS +5 years, major certification +7 years, or 9+ years of recent specialized experience
• Must hold and maintain active TS/SCI clearance.
• Must have a minimum of three years of experience working with Tenable Security Center and Tenable Nessus.
• DOD 8570 IAT II compliance
• Possess working knowledge of supporting Operating Systems: Windows Server 2012-2019 and Windows 10 and 11, VMWare vSphere, Red Hat Enterprise Linux
• Must have experience producing and reviewing scan policies, CONOPS, network diagrams at the enterprise level, and should be able to recommend appropriate locations for Security Center and Nessus scanner instances to ensure full network coverage.
• Possess in-depth experience with DoD IT security requirements
• TESA eligibility

Desired Qualifications:

• Experience with, PowerBI, CyberArk, Evaluate STIG
• Automation using Microsoft PowerShell
• Scripting (Nessus Attack Scripting Language (NASL), Python, Bash) (preferred)
• Adaptable to changing circumstances and operational needs.
• Understanding of Department of Defense Military standards

CITS3

Original Posting Date:

2024-02-08

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Job Description:

Summary:

This candidate plays a crucial role in ensuring the security of project systems, applications, and data. They are responsible for planning, coordinating, and executing security testing processes to identify vulnerabilities and weaknesses in the project’s IT application and infrastructure. This role requires a deep understanding of cybersecurity principles, testing methodologies, and strong leadership skills.

Key Responsibilities:

• Security Test Strategy: Develop and implement a comprehensive security testing strategy to identify and mitigate vulnerabilities across various technology stacks and platforms.
• Test Planning: Create test plans, schedules, and resource allocation for security testing activities, considering the criticality of systems and applications.
• Team Leadership: Manage and lead a team of security testers, ensuring they are well-equipped, motivated, and focused on delivering high-quality results.
• Threat Assessment: Collaborate with security experts to identify potential threats and vulnerabilities, and prioritize testing efforts accordingly.
• Test Execution: Performing and coordinating security testing activities, such as penetration testing, vulnerability scanning, code review, and more.
• Reporting and Analysis: Analyze test results, prepare detailed reports on identified vulnerabilities, and recommend remediation measures.
• Compliance: Ensure that security testing aligns with industry standards, regulatory requirements, and best practices.
• Reporting: Maintain comprehensive documentation of security test procedures, results, and improvement recommendations.
• Communication: Effectively communicate security findings and recommendations to stakeholders, including IT teams, management, and external auditors.
• Risk Management: Identify and assess security risks, and work with stakeholders to develop risk mitigation strategies.

Qualifications:

• Mandatory relevant certifications such as CISSP/OSCP/CREST
• Bachelor's degree in computer science, cybersecurity, or related field
• Proven experience in security testing and vulnerability assessment.
• Proficiency in using various penetration testing tools such as Metasploit, Nmap, Burp Suite, and others.
• Strong knowledge of security testing tools and methodologies. Leadership and team management skills.
• Excellent problem-solving and analytical abilities.
• Knowledge of relevant security standards and compliance requirements.

Nice to have skills :

• Candidates for this role should have 6+ years of experience in cybersecurity, with at least 2 years in a leadership or managerial position.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

The Role:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

It is great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Accountabilities:

· Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause.

· Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.

· Execute SOC playbooks, knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.

· Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.

· Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

· Prepare SOC monthly reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.

· Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

The Individual and their Experience:

· Candidate should have at least 3 years of experience working in SOC and MSS environments, with a Bachelor’s degree in Computer Science/IT/Information security.

· Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, IBM QRadar.

· Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, CrowdStrike.

· Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

· Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.

· Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.

· Candidate should have at least one cybersecurity industry certification such as CEH, CHFI.

· Good understanding of basic network concepts and advantage if exposure to cloud technologies.

· Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

The DISA GSM-O II Task Number 07 (TN07) Joint Force Headquarters DODIN has an opening for a FUTURE ROLE. 

Position Summary:

GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the DOD and COCOMs.  In this role, you will provide support with incident handling, triage of events, network analysis, threat detection, trend analysis, metric development, and vulnerability information dissemination.

Primary Responsibilities:

• Leverage an array of network monitoring and detection capabilities (including netflow, custom application protocol logging, signature-based IDS, and full packet capture (PCAP) data) to identify cyber adversary activity.
• Support the development of Cyber Fusion standard operating procedures (SOPs), and Cyber Fusion Framework and Methodology based on industry best practice and department of defense instruction, guidance, and policy.
• Identify threats to the enterprise and provide mitigation strategies to improve security, and reduce the attack surface.
• Perform analysis by leveraging serialized threat reporting, intelligence product sharing, OSINT, and open source vulnerability information to ensure prioritized plans are developed.
• Analyze and document malicious cyber actors TTPs, providing recommendations and alignment to vulnerabilities and applicability to the enterprise operational environment.
• Discover adversary campaigns, anomalies and inconsistencies in sensor and system logs, SIEMs, and other data.
• Identify, investigate and rule out system compromises, with the capacity to provide written analytic summaries and attack life cycle visualizations.
• Provide risk assessments and recommendations based on analysis of technologies, threats, intelligence, and vulnerabilities.
• Offer recommendations to adjust enterprise or tactical countermeasures to for threats impacting the DODIN.
• Collect analysis metrics and trending data, identify key trends, and provide situational awareness on these trends.

Required Qualifications:

• Active DoD TS/SCI Clearance and eligible for polygraph
• Bachelor’s Degree in related discipline and 4+ years of related experience.  Additional experience may be accepted in lieu of degree
• Security+ Certification (or other equivalent DoD 8570 Level II certification)
• In-depth knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques and cyber threat/adversary methodologies.
• Proficiency with datasets, tools and protocols that support analysis (e.g. passive DNS, Virus Total, Recorded Future, TCP/IP, OSI, WHOIS, enumeration, threat indicators, malware analysis results, Wireshark, Splunk, Arcsight etc.).
• Experience with various open-source and commercial vendor portals, services and platforms that provide insight into how to identify and/or combat threats or vulnerabilities to the enterprise.
• Proficiency working with various types of network data (e.g. netflow, PCAP, custom application logs)

Preferred Qualifications:

• Experience with the DISN and other DOD Networks.
• Skilled in building extended cyber security analytics (Trends, Dashboards, etc.).
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.
• Experience in intelligence driven defense and/or cyber Kill Chain methodology.
• IAT Level III and IAM Level II+III Certifications

GSM-O II TN07

Pay Range:

Pay Range $81,250.00 - $146,875.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.