Total 672 Support Analyst job vacancies in Legal / Public / Security category in The United States of America

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

23rd April, 2024
CyberCX is Australias leading independent cyber security consultancy organisation. To support our rapid growth, we are looking motivated and passionate Security Analysts to work in our Brisbane office. In this role, youll work with your team to deliver great client outcomes and grow your career rapidly as a cyber security professional.  Were looking for candidates that have a sound and relevant technical background. You dont need extensive experience in security, but a passion to learn, a great attitude, and a keen interest in security is essential. You will receive formal and on the job training that will help you grow your career in the cyber security field.   Key responsibilities:    

Technical analysis of alerts and data from security products including (but not limited to) SIEMs, Intrusion detection and prevention systems, end point security solutions, web proxies and network security devices, and vulnerability scanning and management systems 


... Click here to view more detail / apply for Security Analyst

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Security Analyst (Threat Hunter) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, embodying excellence, and bringing people and technology together like never before, we would love to have a conversation with you!

What we seek to accomplish together!

• Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
• Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
• Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
• Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
• Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
• Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
• Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
• Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
• Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.

The Ideal Candidate should ...

• Contribute to securing the organization by enhancing technologies and processes.
• Evaluate security controls against standards, policies, and best practices.
• Improve technology management and perform regular security assessments.
• Build relationships with project and operational teams as needed.
• Exhibit strong technical skills and the capacity to learn new technologies.
• Understand security principles and key technologies, with a focus on sustainable solutions and risk mitigation.
• Analyze sophisticated threats, leveraging knowledge of the threat landscape and cybersecurity fundamentals.
• Utilize forensic analysis and incident response tools to identify and assess threats.
• Have experience in threat hunting, incident response, and familiarity with programming languages like Python and SQL, as well as reverse engineering skills.
• Communicate effectively with diverse groups, reporting key metrics and statuses promptly.
• Possess 2 years and more of highly relevant threat hunting experience.
• Have professional certifications such as GIAC Certified Incident Handler Certification (GCIH) or equivalent

About NCS Group

We aspire to create the extraordinary and impact millions of people every day.

We believe in building a talent-led delivery model to enable our best people to lead, and to support them with the right structure, processes, and tools to ensure that our clients are delivered top quality services.

We want to invest in you!

Great work is never done alone, which is why we believe in fostering a collaborative work environment where people with different expertise and talent can come together.

We provide opportunities for our people to grow within our organization with clearly defined career tracks and specializations, ensuring that our talent and people can continuously deliver new value for our clients.

We’re here to make the extraordinary happen.

Find out more at ncs.co and our LinkedIn career site.

We handle all profiles with the highest level of confidentiality

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

About the Job

You will be tasked with triaging incidents, conducting investigations, and performing threat hunting. Additionally, you will play a key role in enhancing our threat detection capabilities across a complex organization. Other responsibilities are as follow:

• Conducts triage, incident investigations, and threat hunting.
• Reviews, updates, and creates threat detection rules using SIEM or EDR.
• Reviews, updates, creates playbooks and updates the incident response plan. Automates processes using tools such as SOAR or scripting.
• Delivers timely and relevant updates to appropriate stakeholders.
• Stays current with the evolving threat landscape, tactics, techniques, and procedures (TTPs), and is familiar with industry best practices.

Requirements

You will need min Degree in Computer Science, Information Security, Information Technology, or related field.

• Strong foundation in Cybersecurity and analytics skills with the ability to recognize information from various sources to support investigations.
• Scripting knowledge such as Python will be required.
• Knowledge in forensic analysis will be an added advantage.

R1332781

Responsibilities:

• Handling security incidents as reported by individuals and automated systems on laptops and mobile devices.

• Handling support of PC and Mac based users with security related problems.

• Monitoring compliance with IT Security policy and applicable law.

• Coordinating investigations and reporting of security incidents related to Network, Systems and applications.

• Coordinate and execute IT security projects for Arista at multiple locations.

• Engage in security research in keeping abreast of the latest security issues for Cloud enabled enterprises (including SAAS and IAAS).

• Monitoring system compliance with the IT framework for controls and levels of access; recommending improvements.

• Maintains access for business by providing information, resources, and technical support.

• Collaborate with other groups inside Arista to manage security vulnerabilities and help manage risks.

• Conduct and collaborate on laptop and server forensics as well as Cloud / Service Provider forensics with the global security team.

• Administer security-dedicated systems (Software, Firewall management, EDR, NDR, log collection, reporting , analytics, Cloud Security consoles) as appropriate.

• Perform other related duties as assigned. 

Qualifications: 

• BA or BSc. in Computer Science, Management Information Systems, Information Assurance or related field.

• Advanced degree desirable.

• Must have five+ years of progressive experience in computing and information security.

• Must have experience with networking technology, protocols.

• Expert knowledge is desired of laptop operating systems (MacOS, Windows and Linux).

• Previous experience working in a multinational corporate working environment is desirable.

• Proven experience in Cloud computing and SAAS platform security, including email security.

• Proven experience with DLP solutions is a plus.

• CISSP, GIAC or other security certifications desired. 

• Knowledge of information security standards (e.g., ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis. 

• This position requires some weekend and evening assignments as well as availability during off-hours for participation in scheduled and unscheduled activities.

ACOR is a national, employee-owned engineering consulting firm, offering a full range of specialist engineering services across multiple sectors. We have a proven track record for the successful delivery of large-scale multi-discipline projects, as well as smaller niche assignments. Our client's needs are at the core of everything we do their success is our success.
We are proud of our workplace culture, and we reward and recognise our people who best represent our company values of excellence, passion, caring, integrity, collaboration and courage
As a Security Support Officer, you will support the business by coordinating and maintaining our security clearance process and obligations.
The ideal candidate will have excellent attention to detail and a strong interest in security processing.
Day to day tasks include but are not limited to:

Processing security paperwork (security clearance applications, DCAC applications, overseas travel forms, departure forms)

... Click here to view more detail / apply for Security Support Officer

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

• Responsible for setting up and configuring the WFM system according to our clients’ business needs. This includes setting up user roles, permissions, and access levels.
• Collaborate with OSC to manage user accounts, including adding and removing users, resetting passwords, and managing user permissions and access.
• Onboarding of new team members in Genesys systems
• Review and Process change request for making changes or creating new Pulse dashboards.
• Serve as internal support liaison for Genesys system upgrades and testing.
• Maintaining configuration for exceptions, time off, scheduled state groups, etc.
• Collaborating with CCTS to update VQ configurations for Pulse.
• Serve as the first line of technical support for any issues users may encounter.
• Continuously monitor and evaluate the effectiveness of the WFM system, suggest and implement improvements as needed. This could include introducing new features, streamlining processes, or enhancing user experience.
• Ensures that the use of the WFM system complies with all relevant policies, laws, and regulations. This may include data privacy regulations, labor laws, and internal company policies.
• Ensure the integrity of data within the system, including importing and exporting data, and setting up and managing integrations with other systems.
• Provide training and support to users, helping them understand how to use the system effectively.

 

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

ABOUT US
Change your lifestyle and live and work in a vibrant community and great coastal environment.
Ballina Shire Council is situated on the Far North Coast of New South Wales, 20 minutes from Byron Bay and one hour from the Gold Coast. The shire is a popular tourism destination with pristine beaches, rainforest retreats and hinterland hideaways.
ABOUT THE ROLE
Position
We are seeking an appropriately experienced and passionate cyber security professional to join Council's dedicated Information Services team. Reporting to Council?s Coordinator Information Technology, this position will support the team in ongoing system evaluation, selection, development, implementation and maintenance to protect Council?s information assets.
Key focus areas of the position will be to maintain staff alertness around cyber risks and mitigation strategies, and to monitor processes and systems to ensure adherence and implement improvements to information security policies, standards


... Click here to view more detail / apply for Cyber Security Analyst

Overview:
Our large Federal Government client has a requirement for an IT Security Officer (level 5) to work with IT Security Managers and Officers on the day-to-day management of vulnerability and patch notification distribution and monitoring for Stakeholders, management of non-compliance and management of cyber security incidents and RFIs.  The IT Security Officer will be working at Holsworthy in Sydney and will be required to operate in a flexible and agile way in support of a dynamic work area.
 
Major Responsibilities:


Generate, sustain, and maintain relevant system documents and artefacts
Support vulnerability and patch management of relevant systems and associated reporting
Support ICT incident response, collate statistics and analyse trends
Support the remediation of deficiencies in relevant systems and other defect reports
Conduct audits as required
Provide reporting as per the governance reporting requirements, and as required



... Click here to view more detail / apply for Cyber Security Support

Overview:
Our large Federal Government client has a requirement for an ITSO Cyber Security Support / IT Security Officer (combination of work-from-home and on site) to work with IT Security Managers and Officers on the day-to-day management of vulnerability and patch notification distribution and monitoring for Stakeholders, management of non-compliance and management of cyber security incidents and RFIs.
The IT Security Officer will be working with units from Perth. The IT Security Officer may be located in Perth or conduct their duties remotely from  Canberra, however travel to Perth will be required on a regular basis (20% ? 30%) to carry out checks on systems and equipment. The IT Security Officer will be required to operate in a flexible and agile way in support of a dynamic work area.
 
Major Responsibilities:


Generate, sustain, and maintain relevant system documents and artefacts
Support


... Click here to view more detail / apply for Cyber Security Support

1. Responsibilities

· Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats.

· Develop and enhance the integrated Security Operations Centre (SOC) for advanced cyber threat monitoring and detection, early warning and active defence capabilities for both the Financial Sector and MAS as an institution.

· Work closely with internal and external stakeholders to manage the operations of the integrated SOC.

· Develop and implement cyber resilience frameworks, standard operating procedures and playbooks for cyber security operations and incident response.

· Ensure that cyber threats, risks and vulnerabilities are appropriately investigated and addressed promptly.

· Coordinate the investigations of cybersecurity incidents with internal teams and cross agency partners.

· Perform periodic management and third-party reporting.

· Work with partners to perform periodic rules tuning, streamline procedures and implement automation to improve efficiency and quality of output.

· Participate in various internal, external and international forums/projects on cyber security.

· Broad understanding of Financial Sectors operations will be provided so that we can better relate the linkages between business and cyber operation.

2. What we are looking for

• Strong interest in SOC operations.

• Hands-on experiences with implementing services/application on Windows and/or Linux preferred.

• Hands-on experiences with prevailing SIEM tools preferred.

• Hands-on experiences with prevailing cloud technologies preferred.

• Scripting/coding skills preferred.

• Normal office hours, but off-office hours standby to respond to exigencies is expected.

• Management of technical projects/implementation is expected.

• Writing of proposals and procurement related work is expected.