What are the responsibilities and job description for the Network Security Analyst - Tenable position at eStaffLLC?
We are seeking a Network Security Analyst experienced with Tenable security products to work on-site at our Austin, Texas client on-site for 4-5 days/wk providing fulltime support for their Tenable scanning solution.
Responsibilities include:
* Ensuring the solution is configured to Client's requirements
* Scans are configured to scan all devices in the Client environment
* Perform both credentialed and un-credentialed scans in accordance with agency security policies and standards
* Identify software installed on scanned systems with known vulnerabilities
* Perform targeted scanning to identify specific vulnerabilities within the Client environment
* Identify rogue devices after each scan and notify Client IT Operations and applicable service providers a minimum of monthly - rogue devices are those devices that are scanned but not identified as legitimate assets in the Client environment
* Notify Client IT Operations and applicable service providers of any identified vulnerabilities and misconfigurations in a method determined by Client
* Advise Client IT Operations and applicable service providers on methods to reduce vulnerabilities and misconfigurations.
* Advise Client IT Operations and applicable service providers on methods to refine Client patching process to ensure that results of the scans are communicated to the appropriate operational teams responsible for ensuring vulnerabilities and misconfigurations and ensure they are mitigated or remediated in accordance with agency policy.
* Coordination with the team members building configuration baselines
* Administration of the Tenable application including coordinating with operational team for patching.
Requirements
Yrs Skills and Qualifications
8 Deployment and configuration of Network Security monitoring and incident response
8 Administration of Network Security monitoring and incident response tools (EDR, S...)
8 Participation and experience in intrusion detection and incident response activities
8 Effective, professional business communication and reporting