网络安全专家

Overview
This is a technical position where this person will manage, provide technical support, implement, maintain and troubleshoot all security products used by the Firm. They must have significant hands-on experience with security technologies and solutions. They will also perform daily investigation of security incidents, security assessments and audits. Candidates with work experience in financial institutions, government or highly regulated industries are preferred.
Please note this is a remote position. The working hours are: 6am - 2pm Eastern Time, Monday - Friday, and will be part of an on-call rotation schedule. This position will also require the following:

• The ability to travel when necessary.

• Ability to report for work on regularly scheduled days and off hours when required.

• Available to take emergency off hour calls during security incidents.

Responsibilities

• Monitor, detect, and respond to security incidents and alerts across the enterprise.

• Lead investigations of security events, including root cause analysis and evidence collection.

• Perform digital forensics including log, endpoint, and timeline analysis.

• Manage and maintain security technologies such as firewalls, EDR, DLP, IDS/IPS, and SIEM.

• Investigate and resolve security incidents through remediation.

• Conduct vulnerability assessments and risk assessments.

• Perform proactive threat hunting and analyze emerging threats.

• Execute security audits, configuration reviews, and compliance checks.

• Perform incident response activities including evidence preservation and chain of custody.

• Collaborate with internal teams and third parties on investigations and remediation.

• Research and implement new security technologies.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field.

• 4–5+ years of hands-on cybersecurity experience with a focus on incident response.

• Experience in digital forensics, including memory and malware analysis.

• Strong experience with SIEM, EDR, DLP, and firewall technologies.

• Understanding of networking, operating systems, and security architecture.

• Familiarity with frameworks such as NIST and ISO 27001.

• Extensive knowledge of security best practices in regards to computer systems, networks, telecommunication and all associated hardware.

• Very strong analytical approach to problem solving and solution development.

• Must be passionate about security and strive to ensure the Firm is protected against evolving cyber threats.

• Must be a professional with customer satisfaction oriented mindset, creative and be able to balance security with business objectives..

• Must be able to work well in teams.

• Must be able to think outside of the box and go beyond traditional security.

• Must be able to work with Director of Information Security in providing accurate and timely information and closely follow his direction.

• Ability to manage multiple projects and support functions.

• Ability to work in a fast paced and dynamic environment.

• Must be available to report for work on regularly scheduled days and off hours when required.

• Must be available to take emergency off hour calls during security incidents.

• Strong analytical, communication and interpersonal skills.

• Must be able to quickly identify root causes specially during security incident investigation.

• Must be able to create accurate and detailed project plans and complete them in timely manner.

• Excellent documentation skills and capable of creating comprehensive security documents such as standard operating procedures, guidelines and architecture diagrams.

Able to fully perform the job function with minimum supervision
Education

• Bachelor's degree in computer science or information systems or significant work experience.

• Must have the following certifications: GSEC, GCIH, GPEN, GCED, PCNSE or OSCP.

Compensation
The anticipated base salary range offered for this role will be between $145,000 to $185,000 and represents the firm’s good faith and reasonable estimate of the base compensation range. Actual base compensation will be dependent upon several factors, including but not limited to the candidate’s relevant experience, performance, qualifications, degrees, and location, as well as the needs of the firm.
Originally posted on Himalayas