Need Security Operations Consultant at Westborough, MA

Info-Ways; Westborough (MA); On-site; USD 90,000 - 120,000; Full time

Job summary

A technology consulting firm based in Massachusetts is seeking a Security Operations Consultant to perform incident analysis, manage logs, and configure security tools. The ideal candidate will possess significant experience with security operations and tools such as Checkpoint firewalls and Cisco ASA systems. This position is critical to ensuring the security posture of clients and involves coordination with vendors and internal teams. The role requires strong analytical skills and the ability to troubleshoot various security incidents effectively.

Qualifications

• Experience with security operations consulting.
• Strong knowledge of incident management and resolution processes.
• Ability to analyze and manage logs on security hardware.

Responsibilities

• Perform incident analysis and resolution.
• Handle log analysis and management.
• Configure and monitor security tools and devices.

Skills

Incident analysis and resolution

Log analysis and management

Troubleshooting L2 incidents

Configuration changes

SNMP configuration

Tools

Checkpoint firewall

Cisco ASA 51xx series

Blue Coat Secure Web Gateway

FireEye ETP

Tufin

Proofpoint

Job description

Overview

Role: Security Operations Consultant

Location: Westborough, MA

Duration: Contract to Hire

BGV will be done for the selected candidates.

Responsibilities

• Incident analysis and resolution
• Adding devices in the monitoring tool
• Troubleshooting L2 incidents and closing incidents on the ITSM tool and updating the KB documentation
• Configuration changes as recommended by the L3 team
• Log analysis and management – move logs from log server to reduce memory consumption / resource utilization
• SNMP configuration on security devices
• Creating SOC tool user accounts
• Creating user roles
• Creating reports and basic dashboards
• Monitoring fix tool license issues
• Vendor coordination and follow ups (e.g. RMA, TAC, patch upgrade)
• Analyzing and reporting threats and attacks
• Documentation / risk register / run book / SOP (verification)
• Coordination with SME for RCA
• SLA and KPI reports

Technology and Components

• Checkpoint firewall (version R77.xx) :23 HA clusters
• Cisco ASA 51xx series
• Blue Coat Secure Web Gateway, CAS, Future = SSL-V appliance
• FireEye ETP
• Symantec
• Tufin
• SOC & Security Analysis reporting
• Proofpoint

Additional Clarity

• Support the security controls and analysis
• Resolve incidents provided by the Symantec SaaS SOC up to an L2 experience level
• Know when you need to escalate immediately and do so
• Follow playbooks that may require immediate actions, such as removing a computer from the network that has a virus
• Tasks include performing change controls related to the security environment (e.g., patching the security HW/SW environment, rule changes, building VPN B2B IPsec tunnels)
• Examples: Bluecoat (filter web traffic on corporate networks) changes, Check Point (firewalls) changes
• Using the Symantec SOC portal for analyzing logs, user administration, security control items
• Analyzing and managing logs on the security hardware
• Using the Tufin cybersecurity network security reporting tool
• Using the FireEye ETP tool for email security controls
• Using the Proofpoint email security tool

How to Apply

Please respond with your updated word resume and the following details:

• Full Name
• Work Authorization
• Contact Number
• Email ID
• Skype ID
• Current location
• Willing to relocate
• Expected Rate/hr
• Availability
• Best time to take interview

Please contact for any further information.

All your information will be kept confidential according to EEO guidelines.