IT Security Analyst

Must Have:
Must have prior Operational Security Incident and Event Management with Telecom networks.
At least 1-year Security experience for L1 / 3 years Security experience for L2.

Key Responsibilities:
Security Event monitoring & 1st/2nd level analysis.
24/7 (shift or on-call) for security monitoring.
Monitor health of SIEM components and create incidents to support team for action
Process Alerts & Events from in-scope security tools & products.
Triage of events
Escalation of security incidents to customer or relevant party.
Ensure incidents are handled as per SLA.
Monitor health of SIEM components and create incidents to support team for action, SIEM infrastructure monitoring.
Create, update and manage the security knowledgebase.
Define Security Monitoring guidelines as per customer requirements.
Perform review and analysis with customer to help establish lessons learnt, create & update new/existing processes & procedures to mature the SOC and SIEM services and support
Conduct trend analysis of customer networks in order to identify over-utilization of assets, ineffective traffic routing, inappropriate traffic priority, the root cause of repetitive incidents, single points of failure, and other configuration weaknesses that detract from the performance of customer networks.
Address security issues according to customer-defined procedures and ensure their successful implementation in the network by creating Requests for Change (RFC) according to customer-defined procedures.
If appropriate, participate on RFC review boards in order to approve planned activity.
Commission preventative maintenance activities needed to keep customer networks running at optimal security levels.
As needed, provide real-time support to the resolution of major security outages.
Ensure the networks are optimized and running at customer agreed security targets.
Improve the use of auto-alarm correlation in order to minimize the number of alarms managed by Network Analysts and Network Service Engineers.
Define events/alerts within the SIEM tool as per customer requirements.

Skills & Qualifications:
Key qualifications for the role:
Technical and Professional Security Expertise / Security Event monitoring and Analysis
SIEM knowledge (Splunk, ArcSight, Q-Radar)
Basic Security and Network knowledge, Certified CEH, Security , CISSP
Incident Management
Planning and organization
Analytical thinking and problem solving
Technical/Business insight and judgement
Internal customer focus
Team work and co-operation
Results orientation
Initiative and pro-activity

Specific Additional Information:
At least 1-year Security experience for L1 / 3 years Security experience for L2.
Fluent English (writing and speaking)

Required:
MUST be US Citizen.

Note:
Candidate must work 2-3 days per week onsite at Nokia Naperville, IL Office.
MUST be US Citizen.
Will require some shift / evening work

Job Type: Full-time

Experience level:

• 4 years
• 5 years

Application Question(s):

• Have you read the complete JDs before you applied?

Experience:

• Linux: 3 years (Preferred)
• Cybersecurity: 3 years (Preferred)
• Information security: 3 years (Preferred)

Ability to Commute:

• Naperville, IL 60563 (Required)

Ability to Relocate:

• Naperville, IL 60563: Relocate before starting work (Required)

Work Location: In person