I work for Apex Systems, 2nd largest IT staffing firm in the nation.

We have a high-urgent and high-visible Senior Information Security Analyst opportunity for a large reputable e-commerce company in San Jose, CA. This Sr. InfoSec Analyst will join a 20-person Security Operations Center team, and priorities will include: threat analysis, monitoring threats/risks, developing security rules and alerts, creating InfoSec protocol and processes, and other InfoSec responsibilities to ensure organization is secure. This is a very long-term contract (renewable 12+ months), and salary range is open (100-160K with potential flexibility based on skills and experience). Additional perks include: free breakfast and casual work environment, 20% remote work potential, training for major InfoSec certifications (CISSP, CEH (Ethical Hacker), etc…), career development workshops, technical training webinars, transportation, benefits, matching 401K after 12 months, and more! Opportunity to join the Cybersecurity team- the CTO’s number 1 objective for 2016 is InfoSec!

Applicants must have Splunk SPL query experience OR ArcSight query language experience!

Key details of Senior Information Security Analyst: * Support the Security Operations Center (SOC) environment by developing content, creating rules, alerts, and use cases. * Developing security alerts used by the SOC, to alert against malware, penetration/intrusion, password locks, brute force, etc. fast paced eCommerce company placing a high priority in growing their Cyber / Information Security department and controls

Tools & Tech: Use Splunk as their SIEM and logging tool

Requirements of Senior Information Security Analyst: * Experience writing security alerts / security use cases * Experience analyzing logs (Splunk) * Experience with Splunk Query Language (Splunk SPL – search processing language) or other languages leveraged by SIEM Platforms * Security Operations or Security Command Center experience (SOC) or Incident Response experience

Pluses of Senior Information Security Analyst: * Experience querying with Splunk SPL * Any experience with Bash Unix Scripting and/or Arcsight’s logging query language

Please note that we can provide training on Splunk, Bash Unix Scripting, and a variety of other technologies!

Examples of security alerts:
* If a user attempts 25 logons with a failed password to any system they will be locked out and an alert will trigger for the SOC. * If a user is attempting to logon from 2 geographic locations within 10 minutes an alert will be triggered for the SOC.