Job Description

TITLE: CYBER SECURITY OPERATIONS CONSULTANT

DURATION:12 MONTH CONTRACT

IT WILL START AS REMOTE DURING COVID BUT THE PLAN IS FOR IT TO BE ONSITE DOWN THE ROAD.

THEY ARE LOCATED IN HOLYOKE, MA

DESCRIPTION:

Our client, a leader in the energy management industry located in Holyoke, MA, is soliciting resumes for a Consultant to assist their Cyber Security team. This resource will be required as soon as possible through December 31, 2021 (may extend remote and required to be onsite once the client workforce is back onsite.

CANDIDATE REQUIREMENTS: The Cyber Security Operations Consultant will assist the client's 24x7 Cyber Security Operations Center (SOC) by monitoring for and alerting on cyber-attacks in the IT system. MINIMUM QUALIFICATIONS Bachelor of Science, or equivalent education and experience 3+ years of Information Technology experience preferred Knowledge of OSI Model Knowledge of Splunk Application preferred Familiarity with common internet protocols, TCP/IP, HTTP, SMTP, etc. Familiarity with the UNIX and Windows Operating Systems Knowledge of scripting/programming languages. Knowledge of malware analysis and digital forensic procedures One or more of the following certifications preferred: Splunk Core Certified User, GISF, GCED, GSEC, GMON, GCDA, GCIA, GCIH, GDAT, GRID Minimum Requirements US Citizen or permanent resident required Ability to interpret technical manuals and procedures Effective communication skills PRIMARY RESPONSIBILITIES Monitor and triage alerts received from SIEM, Anti-Virus, Network Intrusion Detection Systems and Endpoint Detection and Response Technologies to identify Cyber Attack in IT system Review network flow traffic and network packet capture data based on analysis objective Review operating system and application logging data based on analysis objectives Support compliance operations for NERC Critical Infrastructure Protection Track and report on health of monitoring systems Work rotating shift schedule (days, nights, weekends) as required

The ability and flexibility to work a shift** rotation in the event of Security Operations Center (SOC) staff shortfall is required.

**Able to work a 12-hour, rotating shift that includes weekends and Holidays. This position will train for on-shift SOC coverage, remain on stand-by for SOC shift assignments, and work full shift rotations in a proficiency capacity when coverage is required for whatever length of time needed