Job Listing: Network Security Analyst

Network Security Analyst

Position Purpose
The Network Security Analyst is responsible for enforcing enterprise’s Appropriate Use Policies. In support of enterprise’s mission, the Network Security Analyst strives to provide all approved users of the enterprise with uninterrupted access to network resources in all of the office locations, in-home computer sites and wireless, Internet and dial up connectivity to the enterprise’s network. The Network Security Analyst will be responsible for investigating, tracking and concluding security incidents that have occurred within the network – for example, tracking down rogue DHCP servers, investigating hack attempts from or to enterprise computers, and enforcing bandwidth, copyright and other enterprise policies. The Network Security Analyst acts as the liaison between outside organizations and approved enterprise users. The Network Security Analyst communicates regularly with staff of the Systems and Network Security and updates them on active security cases. Moreover, the Network Security Analyst will be responsible for educating approved enterprise users and professional IT staff on computer and network security.

Problems and Challenges
The Network Security Analyst will be responsible for a complex, state-of-the-art network security that will be rapidly changing to support the enterprise’s growth and development of new business opportunities. The specialist is challenged with providing a secure data and network environment that is reliable, flexible and cost effective.

Essential Position Functions
Principal Accountabilities
1. Develops, obtains approval, and monitors the compliance to the enterprise’s security policies and procedures
2. Enforces the enterprise’s network security policies and seeing that the enterprise complies with all requirements placed on it in accordance with the Patriot Act of 2004.
3. Assists senior management of the enterprise with designing and managing the enterprise’s network security policies and procedures including wide area and local area networks.
4. Responds to reported security violations received from all users and operating units of the enterprise.
5. Manages and configures hardware and software firewalls and related security protection tools.
6. Investigates validity of all reported security violations (checks appropriate logs; tries to duplicate the security violations).
7. Follows up with affected users regarding the cause(s) of security violation incidents. Conducts audit of users’ workstations and network access points.
8. Documents security incidents for the enterprise’s records. Respond to the functional units of the security incidents per the guidelines of the enterprise.
9. Develops and installs tools to monitor the network for suspicious activity.
10. Runs and verifies output from logs and bandwidth enforcement programs and scripts.
11. Tracks use of copyrighted materials including program licenses and informs the Chief Security Office and Chief Information Officer of compliance to and violation of the enterprise’s policies with regard to the use of copyrighted materials.
12. Ensures that all security projects are documents (ongoing status reports and a summary report).
13. Meets with management weekly and provide weekly written status reports.
14. Generates summary reports of security incident statistics.
15. Checks email daily.
16. Identifies and notifies approved users of vulnerable computers.
17. Investigates suspicious network activity (bandwidth spikes, SMTP, POP3, IP and DHCP problems).
18. Develops and implements regular network security scanning procedures.
19. Provides planning and technical support for enterprise installations in compliance with the enterprise’s security policies.
20. Reads security mailing lists and websites in order to keep up-to-date with latest security issues.
21. Investigates new security tools and technologies that may be suitable for the enterprise.
22. Assists in educating all approved and potential users on computer security issues and security concepts.
23. Issues enterprise-wide security bulletins with the approval of the Chief Security Officer and Chief Information Officer.
24. Provides input to management for the design of a secure network design.
25. Acts as the primary interface with vendors for resolving security-related problems.
26. Establishes a growth plan for the network to insure a secure state-of-the-art environment.
27. Provides security support for all computer operations.
28. Recognizes and identifies potential areas where existing policies and procedures require change, or where new ones need to be developed, especially regarding security in future business and technology expansion.
29. Participates with vendors in the assessment of advanced security procedures and database productions including beta and field test preparation.
30. Performs at or above the enterprise’s Information Technology performance standard.
31. Fulfills departmental requirements in terms of providing work coverage and administrative notification during periods of personnel illness, vacation, or education.

Authority

The Security Analyst is responsible for the day to day monitoring and enforcing the security policies on the network for the enterprise.

Schedule and prioritize security-based activities.

Evaluate vendors for security applications and tools.

Design the enterprise’s network security policies and procedures and integrate it with other enterprise activities.

Work with all departments to make sure that they comply with the security policies and procedures of the enterprise.

Participate in security-related task forces whenever necessary.

Work with architects, building landlords, contractors, various telephone companies, external Information Technology organizations, and equipment vendors on security-related issues.

Contacts
Routine contact is required with IT computer operations personnel and application support personnel. Within the business, periodic contact is required with all departments to insure security requirements are met. Outside the business, periodic contact is required with technology suppliers.

Position Requirements
¿ Detailed knowledge of security engineering (e.g. operating system, DBMS, application engineering) and workflow – methods, tools, software products, and environments and technology architectures, products and fire-walling

¿ Hands-on knowledge of business analysis and modeling

¿ Hands-on knowledge of legacy system portfolio security management/solutions enhancement and application support

¿ In-depth knowledge of business systems computing; working knowledge of hierarchal, network, relational, indexed file and object data structures/products.

¿ High school diploma or equivalent is required.

¿ BS or BA degree in computer science, business administration or related work experience

¿ 2-3 years experience as a Network Analyst

¿ 3-5 years experience with wide and local area networks including experience with common-carrier data networks

¿ Ability to communicate effectively and to deal with equipment vendors

¿ Knowledge at the expert level of X-25, SNA, Internet networks, connections, wiring and cabling, and network management

Required Skills for Network Security Analyst Job:

About TEKsystems:

Join TEKsystems® and get your career on the fast track. As the leading technology staffing and services firm, we are passionate about deploying high-caliber IT and communications expertise. To satisfy our constant need for expertise, we actively seek talented Technical Professionals with all levels of information technology and communications skills. TEKsystems knows that every professional has different needs, so we'll work together to determine a suitable benefits package. We offer options to our Technical Professionals that could include: a health plan, 401k, provisions for vacation and holiday pay, and technical and professional training. With a foundation as the nation's largest IT staffing firm, we've become a billion-dollar services company by blending superior client service with an unrivaled ability to source and manage talent to precise specifications, resulting in successful technology executions. Allegis Group and its subsidiaries are equal opportunity employers. M/F/D/V