What are the responsibilities and job description for the Security Technical Analyst position at VeeAR Projects Inc.?
Technical Knowledge and Skills:
- Minimum of 3 years of technical experience conducting security incident response and forensic analysis.
- Working experience of obtaining Cyber Threat Intelligence and making the information usable through the security incident process.
- Working experience of applying IOCs to identify threats in current environment and apply information to prevent future vulnerabilities in infrastructure.
- Technical security project management skills.
- Experience in running Phishing campaigns
- Working experience using best practices standards and frameworks: ISO 27001/27002; PCI DSS v4, GLBA; HIPPA/HITECH; NIST 800-53; CIS CONTROLS, NIST CSF; CIS RAM.
Professional Skills:
The Consultant resource(s) shall possess most of the following skills:
- 2 Years’ experience in information security and forensics and/or security incident response.
- CISSP and CCFP or equivalent certification desired (e.g., CCE, CHFI). Other highly desirable security certifications may be substituted for CISSP (e.g., CISA, CISM, etc.)
- Strong Analytical and Critical Thinking Skills.
- Ability to analyze information and formulate solutions to problems.
- Provide more in-depth analysis with a high-level view of goals and end deliverables.
- Remain proactive and complete work within a reasonable time frame under the supervision of a manager or team lead.
- Extensive knowledge of and proven experience with information technology systems and methods of developing, testing and moving solutions to implementation.
- Ask questions and share information gained with other support team members, recording, and documenting this knowledge.
- Elicit and gather user requirements and/or problem description information and record this information accurately.
- Think creatively and critically, analyzing complex problems, weighing multiple solutions, and carefully selecting solutions appropriate to the business needs, project scope, and available resources.
- Present solutions (technical and non-technical) to management and decision makers.