Network technical analyst job description

Our Favorite CITGO Perks are: • Remote Work options available for eligible positions
• Options are department and/or location specific
• 9/80 Work Schedule Option (where applicable)
• Annual Vacation Incentive (40-120 hours of additional pay) for Eligible Employees
• Paid Vacation Time
• Company-Paid Holidays
• Parental Leave
• Excellent 401(k) Match
• Pension Plan
• Company-Paid Sick Leave and Long-Term Disability
• Medical, Dental, & Vision Plans; FSA and HSA options
• Company-Paid Life Insurance for Active Employees
• Healthy Rewards Program
• Service Awards Program
• Educational Assistance Plan
• Dependent Children Scholarships
• Reimbursement for Gym Membership
• Employee Discount Programs
• On-site Health Clinic
• On-site Cafeteria (select locations)
• On-site Credit Union and ATM (Corporate office only)
• On-site Fitness Center (select locations)
PLEASE NOTE ALL JOBS DO NOT QUALIFY FOR ALL PERKS
Relocation Relocation Benefits are not available for this position. Note Employer will not sponsor visas for position Job Summary

Participate in the operation of the information security scheme related to network security, which includes design, implementation and administration of technical cybersecurity defenses for firewalling, segmentation, network intrusion detection and prevention, network access monitoring and control, network vulnerability scanning, penetration testing, etc. Also, the analyst is an important part in the process of reviewing and executing the incident response process, and performing digital forensics investigations. Participate in team planning activities; occasionally assume responsibility for planning security assessments, evaluations, and projects. Analyst needs to possess knowledge and experience in area of responsibility. Capable of solving a set of security related problems with minimum assistance; contract vendors occasionally. Job requires carrying a pager and/or cell phone and take part on an on-call schedule.

Minimum Qualifications

Degree:

• College Degree (Bachelors Level) in Computer Sciences, Telecommunications, Management, Networking or a related field, required.

The PREFERRED number of years of job related experience required by this job is:

• 3 years.

List any specialized training or unique skills required:

• Experience on network security (network firewall, VPN, SIEM, URL Filtering and web content filtering), preferred.
• Experience with Cisco Security Suite (Cisco-ASA, Firepower FTD, FMC, AMP, ISE, Umbrella), preferred.
• Cisco certified (CNNP), preferred.

• Cloud Security, MS Azure networking and security, preferred.

• Security certified professional (CISSP), preferred.

Job Duties

1. Participate in the design, implementation and maintenance of network technology services for ensuring the confidentiality, integrity and availability of CITGO information assets at Houston and remote sites, including process control networks, and hosts of CITGO information in the “cloud”. By enforcing zoning and firewalling among different areas of the network with different security requirements. Deploy and administrate network access control lists, firewall rulesets, Virtual Private Networks (VPN), Network Access Control (NAC), etc.
2. Provide day to day administration and maintenance of intrusion detection and prevention systems, dedicated to detect known form of attacks and policy violations, as well as anomalies. These systems include the administration of: Firewall, Network intrusion detection and prevention (IDS and IPS), Data Loss Prevention (DLP), Host/Endpoint Security as well as web content filtering and Cloud Access Security Broker (CASB).
3. Administration and maintenance of the department's capability for real-time alerting and digital forensics. Enable sources of security events to produce and forward logs to the Security Information and Event Management (SIEM) tool; ensure the SIEM tool gathers and correlate events to provide the necessary real-time alerting for CITGO Incident Response (IR) capability. Prioritize alerts based on severity and target's criticality, determine and tune out false positives, and add detection to minimize false negatives.
4. Review, test and be part of in the Incident Response (IR) process, by periodical review and testing of the procedure. Also participate in investigating alerts, helping confirm incidents, and be part of response team. Contribute in the lesson learned phase of the incident response process by helping fine tune the detection capability.
5. Conduct security assessments to determine areas of vulnerability to CITGO information assets; this process includes determining information asset owner's acceptable level of risk and recommending controls such as policies, procedures, and technology to mitigate vulnerabilities while decreasing risk down to acceptable levels. Implement the department's vulnerability scanning program, work with IT department to ensure controls, including patching, are implemented timely and with minimal impact to the business operations.
6. Analyze technological advances with existing product lines and emerging technologies, against the requirements of the company and the information asset owner, to ensure the appropriate policies, procedures, hardware and software controls are selected to provide effective protection over an extended period of time. Ensure compatibility within the entire CITGO security scheme and integrate with minimal impact to end users of information asset systems.

• 3 years' experience in related environment (multi-site, multi-country network with thousands of hosts)
• Advanced level knowledge in at least one of the following areas:
• • Strong background with enterprise cloud computing
  • Experience with Office 365 migration
  • Azure AD Identity Management experience, including context aware MFA and password self-service
  • Routing, Switching and Wireless Design and configuration
  • Security - Endpoint Detection and Response, Alert Management, awareness of Threat Actors and TTPs
  • Virtualization - Servers, Virtual Desktops with Graphics, Network Devices, DR and runbooks
  • Endpoint Management - at scale and with client systems scattered around the world
  • Deep OS architecture -
• A desire to keep learning
• Project management experience, including documentation and organizational rollout
• Scripting experience - PowerShell
• Strong communication skills
• Customer service commitment, Business Partner

Other useful experience would include:

• Bachelor's degree in related field
• Relevant certifications - GIAC, Microsoft, Cisco, others
• Software Defined WAN implementation experience
• Report writing skills
• Implementing Zero Trust Networking - App proxies, Identity Management, Device Compliance, Role Based Network ACLs
• Advanced networking skills - knowledge of routing protocols, configuration and troubleshooting of Software Defined networks, quality of service for voice and video
• Auditing of existing networks for external customers
• Experience in the Architectural/Engineering/Construction sector
• Experience with PKI - certificate creation, signing

Walter P Moore is an equal employment opportunity employer and provides equal employment opportunities (including offering competitive compensation and benefit packages) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to any characteristic protected by federal, state or local laws.

Overview

Walter P Moore is an international company of engineers, architects, innovators, and creative people who solve some of the world's most complex structural and infrastructure challenges. Providing structural, diagnostics, civil, traffic, parking, transportation, enclosure, and construction engineering services, we design solutions that are cost- and resource-efficient, forward-thinking, and help support and shape communities worldwide. Founded in 1931 and headquartered in Houston, Texas, our 700+ professionals work across 23 U.S. offices and 6 international locations.

If you don't see a role open you're interested in, Connect with us here to send us your resume.

The Implementations Technical - Network Analyst will fill multiple roles related to implementation of Euronet software projects in this position. This person will be responsible for designing, configuring and supporting network infrastructure in conjunction with Euronet software applications. The ideal candidate should be able to work with clients to understand their current network topology and determine what changes would be necessary to implement Euronet solutions in a highly available environment. The position requires a basic understanding of Cisco routers, firewall technologies and load balancers. Additionally, the candidate should be able to work with other team members to implement and test end-to-end financial software solutions in a customer environment. The ability to program or read object oriented programming languages would be a plus. The job requires the ability to follow a change control process to ensure that version control and tracking is maintained on all changes. Candidate should be able to complete system, network, and server documentation in compliance with SOP. These duties will be performed under general supervision of the Implementations and Project Services Manager. Some travel (including international) will be required.
Requirements

Required qualifications

Bachelor's degree in computer science, computer information systems, engineering, or a related academic field.

Minimum of 2 years hands-on experience with production network infrastructure

Understanding of deploying and supporting Linux and Windows platforms, SQL, IIS server, and other networked systems.

Strong knowledge of Windows and Linux operating systems

Ability to configure networking through TCPIP, Routing and Switching, Subnetting, and Security

Strong analytical and problem-solving skills

Ability to work independently without significant supervision

Desired qualifications

CISCO certifications: CCNA, CCDP or CCNP, CWLS, CWNA

General certifications: MCSE or MCSA, Network+, Security+

VMWare ESX network configuration

Routing protocols: EIGRP, BGP, route filtering, IP SLA

Strong knowledge, troubleshooting and analysis of operating system and complex network environments.

Candidates should possess strong oral and written communication skills to explain and resolve complex network and server related issues to customers and management

Basic experience of JAVA or some other object-oriented programming language(s)

Experience working with relational databases

Working knowledge of SQL

Experience with WebSphere application server

IBM i-Series experience

Benefits

What's in it for you:

An opportunity to work at a growing and technology focused company. We are a progressive, growth-oriented company looking for talented individuals to help us reach our goals.

Search Firm Disclosure:

Please be aware Euronet Worldwide, Inc. is not accepting unsolicited assistance from search firms for this employment opportunity. This includes any phone calls or emails. All resumes submitted by search firms to any employee at Euronet Worldwide, Inc. via-email, the Internet (including social media) or in any form and/or method for this specific position in the absence of a written recruiting agreement executed by both you and/or your firm and Euronet Worldwide Inc. will be deemed the sole property of Euronet Worldwide Inc. and no fee will be paid in the event the candidate is hired by Euronet Worldwide Inc.

We are an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, or national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law.