Sr. System Engineer-IMS

Job Summary

System Vulnerability Analysts analyze vulnerabilities (CVE database) and understand the mitigations to strengthen defenses and understand how the vulnerability works and how to exploit them. Recreate scenarios for the attacks based on Proof of Concepts and analysis against attacks against network infrastructure devices or systems (L4 7 Layer). Defend analysis against attacks against network infrastructure devices or systems (L4 Layer). Experience with traditional wired networks, wireless transport on various protocols. Expert in networking protocols and architectures with advance traditional network security handles In depth understanding of Cyber and IT security risks, threats, and prevention measures. In depth understanding of networking and network security (network monitoring, protocols, PCAP). Network security devices (firewalls, proxies, NIDS/NIPS, etc.) Adversary techniques, tactics, and protocols and related countermeasures. Dynamic and static malware analysis techniques. OS (Linux is required) and application installation and configurations. Experience in one or more: container (docker) and/or hypervisor (VMware or other). Networking basics: to interconnect containers/VMs with dev and test VMs. Experience in tools like Metasploit, TShark, Wireshark. Experience in Ruby scripting, GIT repository, off the shelf products, and tools. Priority will be given if a dev has a security specific certification (OSCP, CRTO, HTB CPTS, etc.) Python automation skills are optional. The CVE (or other) will be available from the Keysight‿s StrikeQ tool. CISA KEVs and OT/SCADA CVEs are the current priority, but are subject to change and expand.