Network Security Engineer

Ramps International inc; Raleigh (NC); On-site; USD 70,000 - 90,000; Full time

Job summary

Ramps International inc is looking for an experienced security investigator in Raleigh, North Carolina. The role involves conducting thorough investigations into security breaches using various tools, maintaining case management, and mentoring analysts.

Candidates should have a strong understanding of TCP/IP, multi-user operating systems, and modern security threats. A commitment to protecting Client data and effective communication is crucial.

Qualifications

• Detailed understanding of the TCP/IP protocol suite.
• System Administrator-level expertise in multi-user operating systems including Unix and Windows.
• Experience in malware analysis and categorization.

Responsibilities

• Conduct in-depth investigations into security breaches.
• Review device logs and interpret data.
• Maintain up-to-date information in a secure case management system.
• Mentor Analysts in investigative skills.
• Conduct threat research to determine Client vulnerabilities.

Skills

TCP/IP protocol suite understanding

Multi-user operating systems expertise

Understanding of modern security attacks

Malware analysis skills

Sandboxing technologies knowledge

Malware reverse-engineering

Scripting experience (shell, perl, python, PHP)

Virtualization technologies knowledge

Cisco network security knowledge

Network security configuration

Job description

Qualifications

• Detailed understanding of the TCP/IP protocol suite
• System Administrator-level expertise in multi-user operating systems including Unix flavors and Microsoft Windows
• Demonstrated expertise in current modern security attacks and threats
• Demonstrated expertise in malware analysis, categorization, and attribution
• Sandboxing technologies and products, commercial and open source
• Malware reverse-engineering and disassembly skills a plus
• Understanding of security incidents involving alternate OSs including Android and iOS
• Experience in scripting in one or more languages: shell, perl, python, or PHP
• Experience with virtualization technologies including VMWare, OpenStack, and other hypervisors
• General Cisco network security product and technology knowledge: Firewalls, Intrusion Prevention Systems, Web and Email Security
• Route and switch infrastructure
• Network security configuration and troubleshooting
• Non-Cisco product and technology knowledge a plus

Responsibilities

• Conduct in-depth investigations into security breaches using all available tools within Customer environment, Cisco, and online:
• Review device logs, full packet capture, and all forms of telemetry, interpret data
• Conduct online forensic investigations of devices (UNIX, Windows hosts and other platforms)
• Interview personnel to obtain information related to investigation
• Maintain up-to-date information in a secure case management system
• Identify, advise and implement incident mitigation actions, using the following tools:
• Null routing, Firewall ACL changes, DNS RPZ
• Next-Generation IPS, Web Security and Email Security
• Endpoint and Network Advanced Malware Protection systems
• Account disabling and application offlining
• Resolve cases escalated from Security Analysts (either as escalated ticket to customer or resolving as false positive)
• Resolve cases dispatched from Customers, maintain daily dialog with Customer on case until resolved
• Effect resolution by driving coordination across infrastructure, law enforcement, human resources, legal, and lines of business
• Vigilantly protect Customer data, ensuring proper handling and protection electronically, physically, and verbally. Ensure assigned shift is covered personally or attended by an alternate Investigator
• Share incidents and intelligence via conference presentations, intelligence exchanges, informal mailing lists, and social media
• Mentor Analysts in investigative skills and customer communications
• Maintain quality assurance for all processes
• Conduct threat research to determine how Clients are affected by threats

Additional Information

All your information will be kept confidential according to EEO guidelines.