Security Operations L2 Support

LWC, Inc.; Durham (NC); On-site; USD 70,000 - 90,000; Full time

Job summary

LWC, Inc. is seeking an IT Security Specialist in Durham, North Carolina, responsible for troubleshooting L2 incidents, firewall configuration, and vendor coordination. The role includes managing Symantec End Point protection and analyzing logs using the Symantec SOC portal.

The ideal candidate will have experience with Checkpoint firewalls and Cisco ASA devices, along with skills in security analysis reporting. Join us for this critical role to enhance our IT security management.

Qualifications

• Experience with managing Checkpoint firewall HA clusters.
• Proficient in configuration changes on Cisco ASA devices.
• Ability to analyze logs using Symantec SOC portal.

Responsibilities

• Troubleshoot L2 incidents and close incidents on the ITSM tool.
• Perform configuration changes as recommended by the L3 team.
• Manage and analyze logs to reduce memory consumption.

Skills

Checkpoint firewall (version R77.xx)

Cisco ASA 51xx series

FireEye ETP

Symantec

SOC & Security Analysis reporting

Job description

• Troubleshooting L2 incidents and closing incidents on the ITSM tool and updating the KB documentation.
• Configuration changes as recommended by the L3 team
• Log analysis and management – (move logs from log server to reduce memory consumption / resource utilization)
• SNMP configuration on security devices.
• Patching the security HW/SW environment.
• Checkpoint Firewall rule changes.
• Building and troubleshooting VPN B2B ipsec tunnels. On Cisco ASA
• Bluecoat ( filter web traffic on corporate networks) changes.
• Creating reports and basic dashboards
• Vendor coordination and Follow ups (e.g. RMA, TAC, patch upgrade)
• Symantec End Point protection management.

• Resolve incidents provided by the Symantec SaaS SOC up to an L2 experience level
• Using the Symantec SOC portal for analyzing the logs, user administration, security control items

• SLA and KPI reports

Qualifications

• Checkpoint firewall (version R77.xx) :23 HA clusters
• Cisco ASA 51xx series
• FireEye ETP
• Symantec
• SOC & Security Analysis reporting

Additional Information

All your information will be kept confidential according to EEO guidelines.