Computer Incident Response Analyst

Recruiter
ERS
Location
Bristol (City Centre)
Posted
30 Sep 2017
Closes
03 Nov 2017
Contract Type
Permanent
Hours
Full Time

Computer Incident Response Analyst
Bristol

Computer Incident Response Analyst: An Opportunity has arisen for an experienced Computer Incident Response Analyst at a major defence company based at their site in Bristol

Computer Incident Response Analyst Responsibilities:
* Contribute to the ongoing development of the Incident Response capability
* Respond to compromised assets across our customer base
* Conduct research into the latest tools, techniques and procedures within the Incident Response industry
* Management, use and analysis of network forensic events from Network Based Intrusion Detection Systems
* Use and analysis of events from Host Based Intrusion Detection Systems
* Deployment, configuration and maintenance of network security appliances and networking devices and associated management software
* Knowledge in the use of a variety of Security Event generating sources (Firewalls, IDS, Routers, Security Appliances)
* Network, system and application level troubleshooting techniques
* Security tools (Vulnerability Assessment, Anti-Virus, Protocol Analysis, Anti-Spyware, etc)
* Conduct intelligence-led investigations
* Conduct host-based forensic investigations using tools such as EnCase, Access-Data or X-Ways
* Conduct compromise assessments using network, log and hostdata
* Present findings in a clear and articulate manner to non-technical audiences

Computer Incident Response Analyst Required Skills / Experience:
* Educated to degree level in an IT Security related discipline and/or equivalent experience within Information Technology
* Demonstrate a minimum of 3+ years of enterprise level networking experience
* Demonstrate a minimum of 3+ years of enterprise level Windows platform experience
* Demonstrate a minimum of 2+ years of enterprise level Linux experience
* Demonstrate a minimum of 2+ years of enterprise level Intrusion
* Detection experience (such as SNORT, Bro or Suricata) and must include packet level analysis
* Demonstrate experience with coding & scripting languages

Desirable:
* One of more professional certifications in relevant security disciplines such as GIAC.

The successful candidate will be required to achieve full SC clearance for this role!!!!!

A great opportunity - apply now to Steve


This job was originally posted as www.totaljobs.com/job/75986651