Job Description

Black Knight is the premier provider of integrated technology, services, data and analytics that lenders and servicers look to first to help successfully manage the entire loan life cycle. Our deep understanding of regulatory and compliance issues complements the knowledge, technology and solutions we offer to help our clients achieve their business goals. Black Knight offers leading software systems; data and analytics offerings; and information solutions that facilitate and automate many of the business processes across the mortgage life cycle.

JOB FAMILY DESCRIPTION
Provide cybersecurity Security Operations Center monitoring, analysis and incident response to information security alert events, and security related events and alarms generated by Black Knight Inc. Utilize infrastructure security tools including IBM QRadar SIEM. Analyze security event monitoring and incident detection and investi gation of security events. Review Tier II security events and tickets according to given procedures, managing incidents and escalation to appropriate teams for further investigation and incident handling where necessary. Search and identify patterns of compromise, emerging threats, threat hunting, evidence of breach and inconsistencies by analyzing historical data, while enhancing current techniques for detecting and analyzing security events. Provide support in the identification of new methods of detecting threats and support continuous improvement of SOC capabilities. Follow standard operating procedures for detecting, classifying and reporting incidents. Supports a 24/7/365 Security Operations Center and monitors security tools and provides response to security incidents. Participates in rotational on-call support.

GENERAL DUTIES & RESPONSIBILITIES
* Supports active real-time security monitoring of alerts and escalating critical alerts in compliance with SOP.
* Follows pre-defined written procedures to troubleshoot security incidents.
* Develop internal documentation: procedures, and operational metrics reports.
* Coordinates resolution with Tier 1 SOC for escalated incidents in a timely manner.
* Implements countermeasures in response to potential or identified cyber threats and attacks.
* Provides log/network/malware/device analysis.
* Performs analysis on security events and determines course of actions for cyber incidents in compliance with the appropriate operational level agreements.
* Provides independent critical thinking to diagnose and analyze severity issues that have been escalated from Tier 1 SOC .
* Provides technical guidance and mentoring to junior level staff as required.
* Executes as project lead.

EDUCATIONAL GUIDELINES
Bachelor’s Degree in Computer Science, Information Systems or the equivalent combination of education, training, or work experience. Professional certifications in cyber security (i.e. CISSP, GIAC, CEH) preferred.

GENERAL KNOWLEDGE, SKILLS & ABILITIES
* Previous experience in cyber security and/or information technology (IT) security required. Previous Security Operations Center (SOC) experience preferred.
* Knowledge of security architectures, firewalls, proxies, and network topology.
* Experience in analyzing security logs generated by Intrusion Detection/Prevention Systems (IDS/IPS).
* Experience with Security Tools related to Enterprise Log Management, IDP/IDS, Antivirus, Firewalls, Proxies, DLP, Forensic Analysis and SIEM.
* Proficiency with trouble ticketing systems and incident workflow preferably with a Security Information and Event Management (SIEM) tool. Experience with IBM QRadar preferred.
* Knowledge of Black Knight’s business environment and the ability to evaluate information security risk implications preferred.
* Knowledge of IT Security Standards and Frameworks including ISO and NIST preferred.
* Ability to document resolution path for incident response and remediation activities into standard operating procedures.
* Ability to research, analytical, and problem solving skills.
* Exceptional verbal, written and interpersonal communication skills.
* Effective ability to present findings and conclusions clearly and concisely to all levels of staff, management and/or vendors.

JOB FAMILY LEVEL
Intermediate professional level role. Works independently on multiple IT security projects as a project team member, occasionally as a project leader. Works on moderately-complex to complex security issues or projects that require increased skill in multiple IT functional areas. Requires knowledge of security issues, techniques and implications across more than one (1) computer platform. Must have extensive knowledge in networking, databases, systems and/or Web operations. Primarily focuses on security administration, but may be involved in developing enterprise security strategies, management of security projects and more complicated security issues. May coach more junior staff. Typically requires four (4) or more years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, and database design and administration with at least one (1) year of expe rience in the IT Security Analyst I role.

Black Knight is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, and protected veteran or military family status. Our employees’ diversity is our strength, and when we embrace our differences, it makes us better and brighter. Black Knight’s commitment to inclusion is at the core of who we are, and motivates us in how we do business each and every day.

How to Apply

Job Types: Full-Time.

726 total views, 0 today

Apply for this Job