Security Operations - Westbborough near Boston, MA

Info-Ways; Boston (MA); On-site; USD 70,000 - 90,000; Full time

Job summary

Info-Ways is seeking a skilled Security Operations specialist based in Boston, MA. The role involves incident analysis, configuration changes, and log management, requiring experience with Checkpoint firewalls and Cisco ASA series.

As part of the role, candidates will handle security incidents, monitor tools, and maintain documentation. Strong analysis and troubleshooting skills are essential to support the operational integrity of our security framework.

Qualifications

• Experience with incident analysis and resolution.
• Familiarity with SNMP configuration on security devices.
• Proficiency in generating reports and dashboards.

Responsibilities

• Analyze and resolve incidents.
• Troubleshoot L2 incidents.
• Perform log analysis and management.
• Execute change controls for the security environment.

Skills

Checkpoint firewall (version R77.xx)

Cisco ASA 51xx series

Blue Coat Secure Web Gateway

FireEye ETP

Symantec

Tufin

SOC & Security Analysis reporting

Proofpoint

Job description

Security Operations - Westborough near Boston, MA

Contract. IT. Role: Security Operations. Location: Westborough near Boston, MA. Duration: 6+ Months. Background verification will be conducted for selected candidates.

Responsibilities

• Incident analysis and resolution.
• Adding devices in the monitoring tool.
• Troubleshooting L2 incidents and closing incidents on the ITSM tool while updating the knowledge‑base documentation.
• Performing configuration changes as recommended by the L3 team.
• Log analysis and management—moving logs from the log server to reduce memory consumption and resource utilization.
• SNMP configuration on security devices.
• Creating SOC tool user accounts.
• Creating user roles.
• Creating reports and basic dashboards.
• Monitoring and fixing tool license issues.
• Vendor coordination and follow‑ups (e.g., RMA, TAC, patch upgrades).
• Analyzing and reporting threats and attacks.
• Maintaining documentation such as risk register, run book, and SOP verification.
• Coordination with SME for root cause analysis.
• Reporting SLA and KPI metrics.
• Supporting the security controls and analysis.
• Resolving incidents from the Symantec SaaS SOC up to an L2 level.
• Escalating incidents immediately when necessary.
• Following playbooks that require immediate actions, such as removing a virus‑infected computer from the network.
• Executing change controls for the security environment: patching hardware/software, rule changes, building VPN B2B IPsec tunnels, and other typical security environment changes.

Technical Skills

• Checkpoint firewall (version R77.xx) – 23 HA clusters
• Cisco ASA 51xx series
• Blue Coat Secure Web Gateway, CAS, Future SSL‑V appliance
• FireEye ETP
• Symantec
• Tufin
• SOC & Security Analysis reporting
• Proofpoint

Additional Responsibilities

• Using the Symantec SOC portal for log analysis, user administration, and security control management.
• Analyzing and managing logs on the security hardware.
• Using the Tufin cybersecurity network security reporting tool.
• Using the FireEye ETP tool for email security controls.
• Using the Proofpoint email security tool.