je.st
news
Security Analyst
2013-10-24 16:36:24| Space-careers.com Jobs RSS
About Inmarsat Inmarsat was formed in 1979 and has been at the forefront of global mobile satellite communications ever since. We are the leading provider of voice and highspeed data communications for users on land, at sea and in the air. Inmarsat plc. is a FTSE 250 company with a profitable track record and significant growth aspirations. We operate in over 80 countries with more than 40 offices worldwide. The next few years will see the exciting realisation of business opportunities on Inmarsats existing fleet of 10 satellites, as well as the launch of Alphasat a joint venture with the European Space Agency and our 1.2 billion next generation satellites and services Global Xpress GX. Primary Purpose of the Role Inmarsat Satellite and Network Operations SNO manages most of Inmarsats data communications network, which provides data communications to various sites and systems as part of Business Infrastructure and Revenue earning systems. These networks are critical to Inmarsats revenue generation and have to be treated as such to provide secure, resilient and timely movement of data. The networks are being expanded as new Inmarsat offices are opened, new systems implemented, new requirements formulated, and to meet current industry standards and best practises. As part of this network expansion we are looking for a Security Analyst to complement the current team who will focus on security related tasks within SNO. The incumbent shall work as part of the security operations team to ensure that security requirements are being implemented and operated as per the overall Inmarsat Global Security program. Key Responsibilities As part of the SNO security team focus on Network, Platform, and Application security issues. Ensure the systems within Inmarsat are compliant with ISO270012, and NIST 80053 security control frameworks. Assist in managing a Security Compliance Risk Management database with detailed information about each compliance control as implemented in the Inmarsat infrastructure. Maintain an up to date System Baseline Configuration Repository of platform configuration tools. Interface with platform and network element administrators to establish system baselines for Inmarsat enterprise infrastructure, and establish and maintain a local repository of system baseline images. Test and update images in synchronization with patch managementIAVM cycle. Maintain a ComplianceVulnerability Assessment VA Scanning Capability. Follow a documented process for routine scanning of Inmarsat infrastructure and network elements. Maintain the VA host machines with updated configuration benchmarks, OS and application patches. Maintain the VA system with updated scanning engine and vulnerability profiles. Conduct routine scanning of Inmarsat infrastructure and network elements. Maintain an Information Assurance Vulnerability Management IAVM and System Patching Process. Interface with platform and network element administrators to determine hardwaresoftware inventories for Inmarsat infrastructure. Integrate the IAVMpatching process with the Inmarsat Configuration Management Board patch and update release schedule. Monitor threat and vulnerability news services for any relevant information that may impact installed infrastructure. Assist in integrating Windows Server Update Services WSUS, Red Hat Network RHN, andor equivalent automated software update services into the IAVM process. Participate as a Member of the Security Incident Response Team. Participate in Security Incident Response Team SIRT events. Conduct research and assessments of security events provide analysis of firewall, IDS, antivirus and other network sensor produced events present findings as input to SIRT. Make recommendations on security threat mitigation strategies. Assist in Writing and Update Security Procedures. Provide research of best business practices, and review security bodies Information Security Forum, NIST, SANS, etc. policy and procedure templates incorporate into Inmarsat body of policy, procedures, and guidelines. Provide Administration Support for the Inmarsat Public Key Infrastructure PKI system and Digital Certificate Management. Assist in managing digital certificates and PKI credentials. Provide system administration support to PKI hosts. Provide Support for the Security Information and Event Management SIEM System. Monitor alarm console and make determination on alarm severity, escalation, and response routing. Assist in integrate SIEM monitoring into incident response process and procedures, assist in creating or updating SIEM triggers and threshold rule sets, and assist in developing and implementing SIEM raw data archive strategy. The post will require some travel to Inmarsats remote offices, work during maintenance windows and being oncall as part of a team to provide out of office support. Essential Knowledge and Skills Cyber security professional with 3 5 years of direct information security operations experience. University degree level education or equivalent in Computer Science Data Communication. A Cisco Certified Internet Expert Security CCIE, Security, or Certified Information Systems Security Professional CISSP or equivalent network certification would be advantageous. Intermediate knowledge of Information Security fundamentals, technologies, and design principals. Knowledge of Security Compliance Frameworks such as ISO 27001 and NIST 800 Series. Proven experience in securing Windows, Linux, Oracle and VM platforms Proven Experience in writing technical and operational procedures. Proven experience of Q1 labs or similar Security Information and Event Management SIEM tools for analysing network and security incidents. Proven experience in Tenable Network Security Nessus, BeyondTrust Retina or similar Vulnerability Assessment VA scanner operations for identifying network and platform risks and misconfigurations. Experience with Public Key Infrastructure PKI systems would be advantageous. Willingness to learn new skills and be selfmotivated. Ability to work in a team environment, to work under pressure and show flexibility. Excellent verbal and written communication skills in English. Which of the Inmarsat qualities IQs are fundamentally important to this job? Solution Focus The individual will remain focused on the end game, and operations of practical solutions in line with business needs and security requirements. Heshe will be resourceful in striving for continuous improvement. Best Value The candidate must seek to achieve best value by identifying cost effective solutions for securing Inmarsats infrastructure. The right individual will objectively assist in determining best value, and carefully consider investment of resources to maintain and contribute to Inmarsats reputation. Inspired Communication Strong and positive communication skills in a variety of mediums is essential. The candidate will need to articulate points of view across the business and across the partnership to ensure Inmarsat has a strong cyber security capability. Additional information Given the scope and responsibilities of this role, with access to sensitive information, technology andor services, the successful candidate is required to be a citizen of the United Kingdom UK with eligibility for UK government security clearance. Applicants will therefore be required to provide personal information, including place of birth and all nationalities, to ensure compliance with UK and US export control requirements. To apply please send your CV and covering letter to Daniel Blackman Recruitment Manager Human Resources Inmarsat 99 City Road London, EC1Y 1AX Tel 44 020 7728 1000 Email recruitmentinmarsat.com
Tags: security
analyst
security analyst
analyst security
Category:Transportation and Logistics