[ale] Opening at BCBST for System Security Analyst

[Mike Harrison]

Forwarded with permission:

I was told being a Linux user with Snort
and other such tool experience would be a positive.


------------------------------------------------------------------
Opening at BCBST - Chattanooga

System Security Analyst II-0900197
Description
The primary purpose of this 2nd level Systems Security Analyst is to
increase the level of assurance of the integrity, confidentiality and
availability of corporate information assets.  As a result of these
activities, management can be assured information assets are both
protected and managed and users are held accountable for their actions
on the various systems at BCBST.

PRINCIPAL ACCOUNTABILITIES
1.       Coordinate analysis, recommendation and implementation of
information security projects to assure new or revised systems are
implemented with adequate consideration to information security.  This
includes controlling project time frames and target dates, conducting
project status meetings with team members and providing status reports
to applicable management.
2.       Administration of or specialization in one or more major
processing platforms including Mainframe(RACF), AIX & HP/UX (eTrust
Access Control), Intel (Windows native/DRA).  network devices.
3.       Administration of or specialization in security technologies
such as intrusion detection, intrusion prevention, encryption, log
consolidation and monitoring , self-service password management and risk
management.
4.       Identify, implement, and maintain information security
initiatives through research and analysis of new technology.
5.       Analyze the processes and procedures of the access control
efforts in the change management and system development life cycles.
6.       Serve as an internal consultant to BCBST management, I/S
systems staff and end users regarding information security measures,
standards and best practices.
7.       Manage projects, both as a project lead and a project team
member.
8.       Recommend changes in policies, standards, and procedures to
support effective security measures.
9.       Provide after hours support for security issues on a 24x7
basis.
Qualifications
*	This position requires a BS degree in Computer Science or
related field or equivalent experience.
*	The System Security Analyst II must have a strong information
processing background with an in depth knowledge of activities performed
by I/S Support personnel.
*	Must have at least 5 years experience as an Information Security
Analyst or have displayed consistently exceptional performance and hold
or be willing to obtain CISSP (Certified Information Systems Security
Professional) or equivalent certification.
*	Excellent human relations and communication skills are required.

*	Understanding of Security Methodologies
*	Experience of TCPIP/UDP/ICMP
*	Advanced knowledge of the OSI Reference Model
*	Windows / Linux / Unix operating systems
*	Advanced experience of Networking components (routers, switches,
load balancers, wireless access points, etc)
*	Advanced experience of routing protocols (BGP / OSPF)
*	Common knowledge of firewalls, proxies, mail servers and web
servers
*	Experience with operational support for operating systems,
applications and networks
*	Advanced knowledge of client/server relationships
*	Common knowledge of relational databases and structured query
language
*	Experience with vulnerability assessments
*	Experience with intrusion management and its components
*	Understanding of encryption algorithms and ciphers (PKI/SSL)
*	Common knowledge of malicious code (worms, viruses, spyware,
etc.)
*	Common knowledge of Virtual Private Networking
*	Common knowledge of multi tier environments
*	Experience with packet inspection / sniffers
*	Experience with forensics and e-discovery
*	Experience with automation and scripting of applications and
systems
*	Experience in anomaly detection (signature / behavioral)
*	Experience with event and log correlation
Job
  Information Systems
Primary Location
TN-Chattanooga
Organization
  Information Systems
Schedule
  Full-time
Job Type
  Standard
Shift
  Day Job
Employee Status
  Regular