Security Analyst—Req 6302
NetSuite - San Mateo, CA

This job posting is no longer available on NetSuite. Find similar jobs: Security Analyst Req jobs - NetSuite jobs

This is a full time position to work directly with internal staff and Information Security to establish and enforce information security best practices, protect internal systems, improve processes and information security controls by assisting with the following types of work.

Responsibilities:
  • Security Infrastructure—Design, develop, and support components of the security infrastructure.
  • Security Awareness—Create security awareness training, communications, and resources.
  • Security Consultation—Resolve internal and external customer questions related to security issues, vendors, solutions, or applications.
  • Security Assessment—Review a specific vendor or solution and define security requirements to gain security approval to use at NetSuite.
  • Security Testing—Perform penetration tests, PCI tests, threat analysis, and environment analysis.
  • Security Compliance—Assist with compliance activities for SOX, PCI, ISO or other audits; includes such activities as Quarterly ACL review, Quarterly Privileged Access review.
  • Security Policies—Create or update security policies, procedures, standards, and guidelines.
  • Incident Response—Provide tier 2 analytical support to the monitoring team, and respond to security incidents, draft incident reports, note lessons learned.
  • On-Call–Up to one Saturday a month the analyst will need to login to email at least 3 times during the day to determine if there are any alerts or issues requiring immediate attention or escalation and respond appropriately.
Qualifications/Skills:
This position requires a person with excellent critical thinking and analytical skills as well as strong written and verbal communication, the ability to multi-task, along with strong project management skills that will facilitate meeting to deadlines on a self-driven basis, and the ability to see security from both the technical and business risk perspectives.

This position requires a minimum of 3 years in Information Security and a minimum of 5 years working within Information Technology. The qualified candidate will have a Bachelor's Degree in Computer Engineering, Computer Science, Electrical Engineering, MIS, or equivalent experience. Recognized industry certification and/or continuing education programs are a major plus.

The following skills are especially useful:
  • Thorough understanding and significant hands-on experience with Windows Active Directory features and security capabilities.
  • Strong analytical and problem solving skills, with an ability to assimilate, analyze and correlate large amounts of forensic data from various network, operating system, application, and security devices, logs, and alerts.
  • Thorough understanding and significant hands-on experience in networking concepts and services such as VPNs, firewalls, NetFlow, 802.1x, etc.
  • Experience auditing backend infrastructure including switches, routers, firewalls, proxy servers, and enterprise systems and storage solutions.
  • Working knowledge of and experience with intrusion detection and prevention (network and host-based) tools, security event and information management (SEIM) tools, and network and system forensics tools.
  • Practical experience in deployment and management of applied IT security technologies and tools such as two-factor authentication, data loss prevention (DLP) technologies, network access control, centralized endpoint protection, and content filtering.
  • Working knowledge of current penetration testing and vulnerability assessment tools and techniques for hosts, applications, web applications, and network devices.
  • Working knowledge of secure coding practices.
  • Familiarity with code security testing tools and methodologies.
Travel: Limited travel related to security activities such as team meetings, penetration testing, investigations, or training.

NetSuite is an Equal Opportunity Employer, and all qualified applicants will receive consideration for employment, as NetSuite does not discriminate on the basis of race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation or any other classification protected by Federal, state, or local law.

NetSuite - 9 months ago - save job - copy to clipboard
About this company
3 reviews
NetSuite is focused on helping midsized companies and divisions of large corporations manage their core business processes in a single...