Information Security Analyst

About the role

Willkie Farr & Gallagher LLP is looking for an Overnight Weekend Information Security Analyst to support the Information Technology Team. Willkie is an elite international law firm of approximately 1,300 lawyers located in 16 offices in six countries. The Information Security Analyst is responsible for supporting and contributing to the ongoing maintenance and development of the Global Information Security program at Willkie Farr Gallagher LLP. In addition, the Information Security Analyst will participate in implementation and management of security tools, processes, and other security initiatives.

Schedule

This is an overnight weekend position requiring three 12-hour shifts, starting Friday night through Sunday night, from 7:00pm–7:00am ET.

Responsibilities

• Assists with investigations of security events to determine malfunctions, breaches, and remediation steps.
• Monitor systems to identify and respond to anomalous activity such as worms, Trojans, viruses, and malware.
• Responsible for operation of vulnerability assessment tools, scanning, researching and analyzing vulnerabilities.
• Research the latest IT security trends, attack vectors, and methodologies; understand the countermeasures in the industry and engage with stakeholders to resolve identified vulnerabilities within SLAs.
• Serve as the primary security operations resource for overnight weekend coverage.
• Provide cross-functional support by delivering coverage for the NOC as needed, ensuring continuity of operations and timely response.

Qualifications

• 2-5 years of experience in Information Security with experience in large scale vulnerability and threat management program
• Hands-on experience in designing and implementing technical solutions of IT Security tools at the enterprise level - e.g. AV, FW, SIEM, IDS/IPS, web and email content filtering, Vulnerability Management Tools, etc.
• Demonstrated experience in vulnerability management, including working with vulnerability management tools such as Qualys, Tenable, Rapid7 etc.
• Experience with SIEM technologies, including administration and analyst operation of SIEM within SOC functionality identifying relevant threats, recommend corrective actions, summarizing and reporting results.
• Knowledge of networking components and various operating systems and cloud environments and understanding their security principles and technologies.
• Bachelor's Degree and current industry Certifications (must be current)
• Understanding of common security device functions, such as IDS/IPS, Network and Host-based firewalls, DLP (Data Leakage Protection), encryption, endpoint security.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent communication skills, troubleshooting and analytical thinking skills, self-driven, multi-tasking, work collaboratively in a team environment, and willingness to adapt to change in dynamic, global environment are critical.
• Participate in a 24x7 Incident Response Team and available to work evenings and weekends as needed.

Preferred certifications

• Certified Information System Security Professional - CISSP (Required)
• SANS GIAC
• Certified Ethical Hacker – CEH
• Cisco Certified Network Associate - CCNA
• Cisco Information Security Specialist (CQS)
• Cisco Certified Firewall Specialist – CQS
• Cisco IPS Specialist (CQS)

Pay

USD $75,000.00 - USD $80,000.00 /Yr.