Conduct regular security vulnerability assessments of the hosted environment. Perform weekly reviews and provide feedback to operations team.
Manage and maintain security tools deployed within corporate and data center
Provide Tier 2/3 escalation support to 24x7 security operations center
Provide proactive security events analysis
Collaborate across the business to identify high impact data collection for improved detection
Collaborate across the business and customers to provide increased coverage for security incident analysis and response
Drive incident response efforts and build processes around SSNs detection and mitigation capabilities
Through documentation, training and guidance, ensure the readiness of the operations team, tools, procedures, and other resources to respond to security incidents and events.
Collaborate and provide feedback to the product and engineering organization with regards to the security aspects tools, systems, and operations to ensure constant and relevant improvement in the company products.
Hands-on technical leader who can bridge the gap between technical knowledge around SSN security products and services with a level of seniority and presence to effectively interact and communicate with both utility clients and SSN technical staff
Result oriented, resourceful, dedicated individual with well-developed communication, presentation, interpersonal and organizational skills, able to influence at all levels of the company
Strong and proven operational and project management skills to drive internal security strategic initiatives and projects and coordinate resources across the organization
Ability to establish cross-functional, collaborative relationships with clients and internal organizations
Ability to recognize and resolve critical issues in a fast paced, dynamic environment.
Ability to work on multiple tasks simultaneously, set priorities, lead and influence others, and collaborate in a team environment, and meet deadlines
Strong written and verbal communication and presentation skills, including the ability to interact with both management and technical leaders
Web Application Security
Strong Regex Skills
Strong Linux Background
Strong Packet Analysis
Data Correlation and Analysis
Minimum 7-10 years security experience
In-Depth technical knowledge in network security, operating system security, Internet/web security, DLP, anti-malware, IDS/IPS, penetration & vulnerability testing, script writing, assembly, operating systems (Windows/UNIX), and web technologies (Internet security),
In-depth technical knowledge in implementing data protection and integrity, operating systems, network security, wireless security, authentication, and security protocols.
Experience in identifying, testing/validating, deploying, and supporting multiple security platforms/tools, including: enterprise security event monitoring, threat management analysis, vulnerability management, NIDS/HIDS, Web Application Firewalls, and DB security scanning tools.
Experience managing and supporting tools i.e. SIEM, IDS/IPS, Firewalls, FireMon, Malware detection tools is highly desirable.
A Bachelor's degree in computer science, information systems, or related discipline is required. Will consider equivalent work experience in lieu of a bachelor's degree.
CISSP and SANS GIAC security certifications preferred and/or highly desired
Redwood City, California, United States