Item 14 - Agreements for As-Needed Information Technology Services

Home Browse Search

Qualifications: 5-6 years of SEIM Management, configuration and maintenance experience is required that includes at least two years hands-on experience with LogRhythm; knowledge of information security concepts, standards and best practices; strong analytical, problem - solving and decision -making skills; strong attention to detail; excellent verbal and written communications skills; ability to work with all levels of management and staff; knowledge of principles and procedures involved in handling sensitive data; understanding of network basics; proficiency with Microsoft Word, Excel and Visio; and any of the following security certifications: CISSP, CISM, CISA, CCNA, LogRhythm. Challenge Solution Rare skill set Located several candidates that had the skills, experience, and certifications DFW was looking for. While the interview process was lengthy, we successfully placed the candidate in 2 weeks of the requirement being released. Successful Placement #2 — Senior Security Analyst Description: Dallas/Fort Worth International Airport requires a senior security analyst to perform control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommends remedial action; execute risk assessment activities, analyze the results of audits (performed by other groups) to produce recommendations of acceptable risk and risk mitigation strategies; work on deploying, tuning and running vulnerability -scanning and penetration -testing tools; reports residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance, to DFW's management; collaborate on critical IT projects to ensure that security issues are addressed throughout the project life cycle; perform analysis on threat alerts from various security tools, including intrusion detection and prevention tools, firewalls, antivirus systems, user behavior analytics tools, proxy devices which requires demonstrable security incident response and/or insider threat experience to determine if the alert is a false positive, a security event, an actual attack, and/or a security incident; configure and manage security integration components in Microsoft 365 Security & Compliance environment, including connectivity, synchronization services, and authentication; support and handle incident response by investigating security intrusions; monitor and analyze Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) to identify security issues for remediation; recognize potential, successful and unsuccessful intrusion attempts and compromises through reviews and analyses of relevant event detail and summary information; evaluate/deconstruct ransomware, malware (e.g. obfuscated code) through approved vendor provided tools; communicates alerts to leadership team regarding intrusions and compromises to their network infrastructure, applications and operating systems; prepares monthly metrics on briefings and reports of analysis methodology and results; consolidate and conduct comprehensive analysis of threat data obtained from classified, proprietary to provide indication and warnings of impending attacks against networks; monitor and interpret Azure AD Connect events and Azure AD access reviews; and provide escalation point for Systems Admins team as a support for Office 365 related incidents on threat management. Qualifications: Bachelor's degree in business administration, computer science or a related field; 5 years network security systems support; 5 years of Kali Linux experience or at least 5 RFP No. 20-124 Information Technology As -Needed Professional Services Page 1 54