Job title: Infra Security OPS Analyst

Location: Phoenix, AZ

Job type: CTH/CWR

Mandatory skill:

Exposure to Log monitoring , analysis and compliance.

Preferred skill:

Log monitoring, PCI compliance and incident analysis

Job responsibility:

• Specifics TBD until assessments and audits are complete
• Fill specific gaps to achieve SOC 2 P2 compliance – based on Baker Tilly’s P1 audit and GRC’s
• Fill specific gaps to achieve PCI compliance – based on MegaPlan’s assessments
• Policy writing/updating
• Daily Monitor RSA logs – mitigate issues
• Daily Monitor Cisco Logs using Solarwinds/Syslog– mitigate issues
• Daily Monitor Server Logs using Solarwinds – mitigate issues
• Daily Monitor FIM Logs – mitigate issues
• Monitor SecureWorks as alerts come in – mitigate issues
• Quarterly Monitor Wireless system – mitigate rogue devices
• Monthly Monitor systems not commonly affected by malicious software – work with engineers to patch and mitigate as needed (routers/switches)
• Monitor Cisco patching – work with Network engineer to patch as needed
• Maintain PCI compliance documents
• Implement and Maintain Risk Assessment process
• Maintain the process to identify security vulnerabilities and assign risk levels
• IO access SOC annual review
• ARM, ARMCDE, 4D, Oorcm termed employee access review
• Quarterly implementation and review of Qualys scans
• Quarterly review of Nessus scans
• Review vendor websites, industry news groups, mailing list, or RSS feeds for vulnerabilities, classify into High, Medium and Low and send to proper teams for remediation
• Monthly checks of the AZURE monitoring system, google analytics and windows patching will be performed. Immediate response to alerts from the AZURE monitoring system for remediation will be performed.

Job Type: Contract

Required experience:

• PCI compliance: 1 year
• Infra-Security: 5 years
• GRC: 1 year
• RSA: 1 year
• AZURE: 1 year
• Cisco Logs: 1 year