Cyber Security Analyst

Description:
**Hybrid | Westlake, TX**

Our client is a leading provider of financial services, including brokerage, investment advice, retirement services, and asset management, is looking for a Cyber Security Analyst.

Due to client requirement, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $60 - $64 / hr. w2

Responsibilities:
The job involves performing functions related to Network and Perimeter specialized Security Engineers including Web Application Firewall, Email Security, , Network and cloud security Cyber Incident Response. Looking for an energetic, hard charging individual able to keep up in an exciting and fast-moving security operations team that is engaged in several high-profile security projects to enhance our security posture. The candidate will be immersed in a quick changing environment in a very rapid changing threat landscape, working with numerous security experts. The qualified candidate must be adaptable and able to work in a fast-paced environment where learning new skills and understanding new system architectures quickly is a key to success.

Experience Requirements:

• 7 to 9 years of security experience are preferred, particularly those who have worked in corporate settings.
• Mandatory is WAF Operations and E Mail Security is Secondary.
• Security experience with any WAF provider, API definitions, custom rules, writing bot management rules and analyzing traffic logs.
• Proven experience troubleshooting and simulating HTTP client requests (e.g., curl, postman, HAR file analysis).
• Strong understanding of core networking concepts (e.g. - TCP/IP, DNS, HTTP, proxy, load-balancing, etc.).
• Functional experience with Splunk, SIEM, or other log aggregation & analysis technologies.
• Experience with cloud solutions such as AWS or other IaaS/PaaS/SaaS environments.
• Ability to interact with both technical and non-technical staff, including management and executives, with experience articulating technical material in business terms.
• Functional understanding of network controls and policies to stop cyber threats.
• Familiarity with external facing security controls that can stop external attacks that may occur: such as WAF tuning, Bot management, API protection, network policy governance, troubleshooting, and incident response.
• Familiarity with criminal activities and the attacks that may occur in each layer of the OSI model.
• Ability to make information security risk determinations based on intelligence analysis.
• Understanding cyber threats, malicious cyber threat actor motivations, and capabilities relevant to regions of interest.

Technical:

• Perimeter and cloud security Expert with an outstanding understanding of the latest practices and trends in edge security.
• Solid experience in Web application firewall and API Security. Good exposure to how to proactively combat OWASP top 10, Account take over , API and other bot external attacks .
• Evaluate, deploying and managing Akamai / AWS / Azure Web Application Firewall security configuration.
• Good knowledge of Email Security (EOP), Email Security Network IDS/IPS, WAF, DDoS Control and Cloud Security.
• Advance experience on Splunk or other SIEM (Security information and event management) Monitoring. Log Analysis Expertise?- Web logs, NetFlow and Packet Analysis ?
• Analyzing web traffic patterns to improve protections.
• Reviewing policy enforcement change requests; interviewing submitters who have requested security configuration changes and require additional requirements gathering.
• Knowledge of Agile, DevSecOps, Open Source and a programming language is of substantial advantage
• Manage Cyber Incidents and other service incidents for WAF and other security technologies

Behavioral

• Positive personality and can-do attitude; you also have good communication skills with an excellent command of the English language.
• Open-minded, empathic and a team-mate with a partnering approach and an enthusiastic and motivated personality, with demonstrated experience in solving complex challenges
• Intellectually curious and therefore remain abreast of new technologies and developments relating to technical products that might be used enterprise wide and software delivery methodologies
• Proficient in balancing business partner views and interests
• Teammate with effective interpersonal & communication skills (written and verbal)
• Senior technical and non-technical Stake holder management skills