Cyber Security Analyst

RESPONSIBILITIES:
Kforce has a client in Westlake, TX that is seeking a Cyber Security Analyst.

Responsibilities:
* Evaluate, deploying and managing Akamai / AWS / Azure Web Application Firewall security configuration
* Analyzing web traffic patterns to improve protections
* Reviewing policy enforcement change requests; Interviewing submitters who have requested security configuration changes and require additional requirements gathering
* Manage Cyber Incidents and other service incidents for WAF and other security technologies

REQUIREMENTS:
* 7-9 years of security experience preferred, particularly those who have worked in corporate settings
* Perimeter and cloud security expert; Outstanding understanding of the latest practices and trends in edge security
* Experience in Web application firewall and API Security
* Exposure to how to proactively combat OWASP top 10, Account take over , API and other bot external attacks
* Security experience with any WAF provider, API definitions, custom rules, writing bot management rules and analyzing traffic logs
* Experience troubleshooting and simulating HTTP client requests (e.g., curl, postman, HAR file analysis)
* Understanding of core networking concepts (e.g. - TCP/IP, DNS, HTTP, proxy, load-balancing, etc.)
* Experience with Splunk, SIEM, or other log aggregation & analysis technologies
* Experience with cloud solutions such as AWS or other IaaS/PaaS/SaaS environments
* Understanding of network controls and policies to stop cyber threats
* Familiarity with external facing security controls that can stop external attacks that may occur: such as WAF tuning, Bot management, API protection, network policy governance, troubleshooting, and incident response
* Familiarity with criminal activities and the attacks that may occur in each layer of the OSI model
* Ability to make information security risk determinations based on intelligence analysis
* Understanding cyber threats, malicious cyber threat actor motivations, and capabilities relevant to regions of interest
* Knowledge of Email Security (EOP), Email Security Network IDS/IPS, WAF, DDoS Control and Cloud Security
* Experience with Splunk or other SIEM (Security information and event management) Monitoring
* Log Analysis expertise: Web logs, NetFlow and Packet Analysis
* Knowledge of Agile, DevSecOps, Open Source and a programming language is of substantial advantage

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.