OneIT - SOC Analyst

WSP is a global consulting firm assisting public and private clients to plan, develop, design, construct, operate and maintain thousands of critical infrastructure projects around the world.  

Position Summary

Under the guidance of the Manager SOC Tools, contribute to a team of technical experts that maintain and operate the security tools of the SOC. Provide metrics and governance over security tools, work on deployments and scheduling of updates, policy changes, etc. Collaborate on Blue team activities.

Specific areas of responsibility may fall into any one of the following areas of Security Operations, as assigned by the staff’s management.

• Security Analysis
• Threat and Vulnerability Management
• Network, Database, Server and Endpoint, and Application Security
• Antivirus and Antimalware analysis
• Event Analysis
• Privileged access management

The Analyst of SOC Tools and Ops will have multiple security related roles within the organization. Their main goal will be to provide a secure computing environment for the organization to conduct their business. The global security operations team will have overlapping duties however each role will have more specifically focused duties. As such, the role and essential duties will fit into the below classifications most closely.

• Providing documentation and a working toolset for the IR Team and working with major incident teams to escalate problems and provide resolutions.  
• Incident Management Process and Forensics – assist in providing forensic capabilities for the incident management process when needed. Monitor and manage infrastructure logging for security, including perimeter network devices, malware prevention, and intrusion prevention.  
• Definition and implementation of controls - Defines security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems. Develops and validates baseline security configurations for operating systems, applications, and networking and telecommunications equipment.  
• Endpoint Protection Strategy – Formulate the companies’ Endpoint protection strategy, including but not exclusive to malware, host intrusion, encryption, browser protection and hardware level security controls.  
• Network infrastructure security – responsible for determining and maintaining the technical standards for configurations of routers, switches, firewalls, IPS and IDS devices.  
• Develop positive working relationships with other team members and business partners and partner across teams to align with WSPs internal and external client demands  
• Finance/Budgetary Responsibilities  
• Support the Manager SOC Tools in developing the budget projections based on short-and long-term goals and objectives.

Minimum Qualifications 

• 5- years related experience in information security, risk, compliance, or similar position
• Bachelor's degree or equivalent in Information Technology, Computer Science, Engineering or related field
• Knowledge of security technologies (encryption, data protection, network intrusion prevention, host intrusion prevention, firewalls, privilege access, etc.)
• Knowledge of enterprise IT security concerns and technologies, including but not limited to VPNs, network security, encryption, authentication, application-level network protocols, PKI, IPSec, Firewall, SSH, SSL, DES, LAN/WAN, and TCP/IP
• Knowledge of security best practices with relation to applications, network and client setups
• Experience with IT Governance frameworks such as COBIT, ITIL and ISO 2700x, NIST
• Experience with governance, compliance and audit within IT environments
• Experience of risk management, including risk analysis, mitigation and monitoring
• Knowledge of information security regulations applicable to WSP

Preferred Qualifications

• Master's degree in Information Technology, Computer Science, Engineering or related field
• Certification in Information Security (CISSP, ISC, or CISM) practices and policies 

WSP Benefits

WSP provides a comprehensive suite of benefits focused on a providing health and financial stability throughout the employee’s career. These benefits include coverage related to medical, dental, vision, disability, and life; retirement savings; paid sick leave; paid vacation (or other personal time); paid parental leave; and paid time off for purposes of bereavement, voting, and/or attendance at naturalization proceedings. 

Compensation
Expected Salary (all locations): $75,000-$125,000
WSP USA is providing the compensation range that the company in good faith believes it might pay and offer for this position, based on the successful applicant’s education, experience, knowledge, skills, abilities in addition to internal equity and specific geographic location. WSP USA reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, and/or federal law.

Expected Salary (Colorado only): $80,000-$110,000

WSP USA is providing the compensation range that the company in good faith believes it might pay and/or offer for this position within the state of Colorado, based on the successful applicant’s education, experience, knowledge, skills, and abilities in addition to internal equity and specific geographic location. WSP USA reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, and/or federal law.