Overview

Upwork has partnered with a digital ecosystem enabler that powers today’s fast-growing digital economy. They enable the digital transformation of enterprises globally, including 300 of the Fortune 500 and carry around the world’s internet routes and connect businesses to the world’s cloud giants. 

They are committed to enabling Industry leaders in this New World of Communication, with their unique promise of delivering secure connected digital experiences. 

 They are looking for an Information Security Specialist in conducting forensic investigations and analysis to support cyber incidents reported to the Incident Response team

Responsibilities

• Monitor and respond to security breaches/viruses/intrusions while performing deeper forensic investigations using SIEM, EDR/EPP, and other forensic technologies.
• Oversee the assessment of information security systems.
• Operate as the primary point of contact for any event while tracking the development of the ticket.
• First/Second/Third level support identifies the root cause, security gaps, and recommendations.
• Identify or implement solutions to information security problems.
• Experience in Security Audits (ISO 27001)
• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
• Design, deploy and oversee the implementation of information security procedures and policies.
• Excellent technical writing and presentation skills are required.
• Identify, document, and prepare detailed reports on relevant findings.
• Ensure all documents are recorded and tracked to meet audit, compliance, and legal requirements.
• Build, maintain and upgrade security technology for the safe use of computer networks and the transmission and retrieval of information.
• Troubleshoot security and network problems.
• Rotating schedule – Operate a 24x7 Cyber Defense Response Center.
• Generate daily security reports.

Qualifications

• Can work locally, from Matawan (New Jersey) office
• Has SIEM experience (between L2 and L3)
• Can work on a rotating schedule

Technical Skills

• At least 4 to 5 years of experience in SIEM technologies is a requirement. (LogRhythm Preferable).
• Experience with Malware/Ransomware Analysis.
• Experience in troubleshooting and analyzing incidents in Windows, Unix, and Linux environments.
• Experience in Incident Management, Investigation, and Response (Global Corporate Enterprise Preferable) is a requirement.
• Proficient in Threat Hunting, Host-Based Forensics, and Network-Based Forensics.
• Review log-based data, both in raw form and utilizing SIEM or aggregation tools.

Preferable Skills

• Preferable 2 to 3 years of experience in EDR/EPP technologies is a requirement.
• Preferable experience in Data Loss Prevention (DLP)
• Demonstrated knowledge of forensic tools (Encase, FTK, Wire-Shark, Kali)
• Understanding of different telecommunications devices, such as CISCO, ADVA, and other network appliances
• Preferable experience in CASB, PAM, Active Directory, SOAR, Nagios, IBM Q-Radar, RSA, Splunk
• Preferable experience with programming or scripting languages (Java, Spring Framework, Python, Ruby, PowerShell)
• Understanding of networking technologies and tools, such as firewalls, proxies, protocols, IDS/IPS, and encryption.
• Demonstrate knowledge of database structures and SQL
• Conduct examination of digital media (hard drives, network traffic, images, etc.)
• Experience in sending Threat Hunting Advisories
• Capture/analyze network traffic for indicators of compromise.

Benefits