Tag: log
RSA hints at ESIM and DPI portfolio convergence with NetWitness Panorama release
Leveraging the DPI capabilities of its NetWitness acquisition, RSA provides a peek at what it believes the future of ESIM might look like.
Security/Log Analyst Opening at Q1 Labs Inc.
Position: Security Analyst
The Security analyst will be responsible for providing expertise with analysis of a variety of security and network technologies in order to integrate these 3rd party products with our technology. The candidate will need working knowledge categorizing logs and extending the information from these devices to correlate information about potential vulnerabilities etc. Working within a small team, the successful candidate must have a strong work ethic, the ability to work as part of a team, and work within a fast-paced and dynamic environment.
Requirements:
• Have experience with a variety of security and network technologies, applications, operating systems, and databases. Knowledge of how all of these devices work and communicate within a networked environment is essential.
• Strong scripting skills
• System and application development experience a plus
• Understanding of log transport protocols (syslog, snmp, etc)
• Bachelor and/or Masters Degree in a related field or an equivalent combination of education and experience.
Responsibilities:
• Work closely with product management and the integration team to identify, categorize and correlate events from a variety of devices.
• Continuously monitor vendor websites, discussion forums, and technical publications to identify new products and updates.
• Match device events to known vulnerabilities.
• Maintain a collection of sample logs, attributes, documentation and configurations from third party devices and implement a database to share that information with other members of the organization.
• Work with the team to improve the product quality and processes.
• Identify new rules and reports to identify important events within and across networked devices.
Required Skill Set:
• At least 4 years experience in system administration or IT Security field.
• Experience with Perl and Java
• Experience working within a Linux environment
• Flexible, able to adapt to changing requirements, scope, and schedule.
Please send me an email if you’re interested at andrewsmhay(shift-2)gmail.com.
SANS Tool Talk Webcast: “Log Management: No Longer Optional”
I’ll be presenting a SANS Tool Talk Webcast entitled “Log Management: No Longer Optional” on Tuesday, June 2nd at 1pm EST.
About the session:
Both network and security professionals agree – a log management solution is no longer optional. It’s now a required tool in their arsenal.
Unfortunately, many of their log management projects have failed because the solution they chose was unable to support the size and scope of the deployment and/or effectively deliver useful results.
During this webcast Andrew Hay will discuss important considerations when selecting and deploying a log management solution for your organization and how to avoid some of the pitfalls.
Join this webcast and learn about:
- Drivers of log management, including security best practices and regulatory mandates
- Architectural considerations for supporting large distributed enterprise networks
- Deployment considerations for supporting a multi-vendor network
- Correlation considerations to effectively make sense of enterprise-wide network & security events
- Advanced security management considerations to improve an organization’s ability to detect more complex integrated network threats
- Reporting, auditing and forensics considerations that support compliance initiatives
Sign up for the webcast here.