Position Summary:
The selected individual will be a key member of the IT Team functioning as the point of contact for cyber security events. Protects computer assets by establishing and enforcing system access controls; maintaining disaster preparedness; and other related duties
Overall Responsibilities:
Point of contact for NAISEA cyber security events
In Real Time conducts monitoring, event evaluation, triage and alerts
Umbrella proxy research
McAfee V/HIPs/DLP event handling
Nexpose vulnerability scanning
IDS alerts
Qradar/SIEM alerts and monitoring
Service Now Incident ticket creation and review
Constructs and maintains dashboards related to above
Identification/filtering of false positives or non-critical events from daily reports
Conducts Tier 1 Incident analysis and response based on response plans
Escalates issues and incidents as appropriate
Executes tasks/changes in Umbrella Whitelists, NNT file integrity scanning, vulnerability scanning, and AV, or deployments
Support / Address other risk, information security and compliance activities as assigned
Job Requirements:
Three – Four years of technical experience in the information security field - at least one year of practical experience in an incident response role (higher education in information security may be used to supplement overall experience).
Experience with security event monitoring or log management tools and network anomalies, and knowledge correcting and/or mitigating technical vulnerabilities.
Proficiency in conducting vulnerability assessments/scans and addressing the results using industry leading tools
Good understanding of function of Proxies, IDS, incident reporting, HIPs, DLP and networking in general
Configuration or management of any of the above preferred.
Assist in the development and implementation of security policies and procedures, and update, maintain and document security controls
Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
Must be able to communicate complex technical concepts clearly, both oral and written, and interpret regulatory guidance and identified vulnerabilities to a wide audience.
Ability to manage multiple ad-hoc projects simultaneously and to work in a highly dynamic, rapidly changing environment; Ability to exercise discretion and maintain confidentiality.
Assist in performing product evaluations and recommended products/services for network security.
Coordinate with senior staff on development of plans for implementation of new projects and processes as necessary.
Ability to work independently and skills to interact with customers and team members.
Physical Demands & Work Environment:
While performing the duties of this job the employee requires mobility, the ability to distinguish letters, numbers and symbols as well as hand/eye coordination. The employee regularly sits for long periods of time. The employee is occasionally required to stand, walk, and reach with hands and arms. The employee regularly uses office equipment such as multi-line telephone systems, fax machine, copy machine, calculator. Employee will regularly use a computer for extended periods of time. The employee must occasionally lift and/or move up to 10 pounds.
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
All of the above job duties may be changed/modified/deleted at any time by the Company; any other job duties may be assigned as needed.
Standard General Security Roles and Responsibilities
Understand and adhere to policies, guidelines and procedures pertaining to ethics and compliance, and to the protection of Information Assets, integrity of customer transactions, proper and ethical utilization of access privileges and resources provided to perform the role. Fully comply with all provisions of the Company Code of Conduct, Acceptable Use Policy and Confidentiality Agreement.
Protect company assets, systems, proprietary and confidential information in accordance with arvato Confidentiality policy and Corporate Information Security Policies and Procedures.
Proactively report actual or suspected ethics and compliance violations, vulnerabilities, security incidents and breaches in the confidentiality, integrity or availability of Information assets as per the Company’s Incident Reporting Process.
Process personal data, client data and employer business specific data in accordance with customer contracts, company guidelines and federal and state requirements.
About Arvato
Arvato is a global BPO solutions provider. A subsidiary of Bertelsmann, one of the world’s largest media companies, Arvato has more than 65,000 employees in over 40 countries.
Arvato has over 3,000 employees across multiple sites. As a leading global solution provider we design and implement customized Finance & Accounting, Supply Chain and Customer Relationship Management solutions for some of the most well-known brands in the world. In other words, whenever you download software, shop online, or have your smart phone repaired, there’s a good chance that we were active behind the scenes as a service provider.
Company:Arvato Corp.
Country:Philippines
State/Region:NCR
City:Alabang
Postal Code:1781
Job ID:84984
[[customQuickApply]]84984Arvato Corp.
