Job Description :
Position: Cyber Security Insider Threat Analyst
Location: Holmdel, NJ
Duration: 2-3 Months
Skype is fine
H1B/USC/GC
Splunk ES experience, Certification in Security+ or SANS SEC 301
Job Description
Project: Cyber Security Insider Threat Analyst
Work location: Holmdel, NJ onsite, prefer local resource but will pay T&L for the right resource who travels
Description:
Integrate into the day to day with Cyber Operations team supporting deterring, detecting and mitigating insider threats, including the safeguarding of classified information from exploitation, compromise
or other unauthorized disclosure.
*
Work closely with the Cyber Security Threat Intelligence, Response, Forensics and Event Monitoring teams to develop a comprehensive Insider Threat response capability.
* Perform day to day data loss prevention incident monitoring and tracking.
* Execute investigation requests, generation of reports and best practices, information sharing and management of internal and external stakeholder relationships.
* Utilize trend and anomaly analysis, user activity monitoring, data mining and security device logs to identify potential threats for further investigation and resolution.
* Perform technical investigations in support of potential inside threat activity.
* Responsible for providing status and raising issues to Senior Management, Technology Management, and to Business and Technology Release Management as appropriate.
* Assist in developing and prioritizing key capability objectives for the function including detecting hidden signs of internal IT sabotage, theft of sensitive information and fraud.
* Assist in developing of insider threat awareness initiatives and incorporate them into periodic security training for all employees.
Required Skills:
BS in IT/ Computer Science, or a related discipline.
* 5 + years professional experience in a bank or other financial institution, consulting firm, and/ or software company
* 1-3 years hands of experience in the field of information assurance, incident response, or cybersecurity.
* Experience working in an Insider Threat program.
* Hands on experience with a Data Loss Prevention tool (Symantec, McAfee, etc.
* Hands on experience with Imperva File and Data Access Management.
* Hands on experience with an Incident Management Tool (RSA Archer, ServiceNow
* Ability to liaise with business and technology peers.
* Certification in Security+ or SANS SEC 301.
* Experience working on global/multicultural teams across different time zones.
* Splunk ES experience
* Experience with an industry standard insider threat tool (Exabeam, Securonix, etc.
* Ability to present critical security deficiencies and solutions to multiple audiences.
* Excellent communication and organizational skills.
* Outstanding work ethic with a passion for information security.
* Exhibits high-degree of creativity, self-motivation, and commitment to tasks