Applies advanced subject matter knowledge to solve complex business issues and is regarded as a subject matter expert. Frequently contributes to the development of new ideas and methods. Works on complex problems where analysis of situations or data requires an in-depth evaluation of multiple factors. Leads and/or provides expertise to functional project teams and may participate in cross-functional initiatives. Acts as an expert providing direction and guidance to process improvements and establishing policies. Frequently represents the organization to external customers/clients. Exercises significant independent judgment within broadly defined policies and practices to determine best method for accomplishing work and achieving objectives. May provide mentoring and guidance to lower level employees.

Responsibilities:
 
• Manages and proactively monitors HP security system issues and threats, runs complex analyses on security vulnerabilities, incidents and threats, and uses in-depth research to inform HP's resolution process.
• Analyzes vulnerabilities, attacks or threats to determine risk, adversary intent, and prioritize mitigation or response.
• Owns resolution of HP security issues related to security vulnerabilities, incidents and threats.
• Recommends containment, eradication, and recovery measures for any observed attack or breach. Combines industry expertise with a thorough understanding of information and security technology to direct development of vulnerability remediation or mitigation plans.
• Demonstrates advanced capabilities to develop custom programs, scripts, etc. enhancing off-the-shelf products or established tools.
• Recommends and coordinates the development, enhancement, organization, and maintenance of a HP’s security solutions, including research and security system analysis.  Contributes to HP's security response, threat and resolution knowledge base by aggregating and incorporating the analyses/outputs of security professionals.
• Monitors the outputs of security professionals.


Education and Experience Required:

• Bachelor’s degree or equivalent experience will be considered.
• Technical Cyber Security Certification through one of the recognized bodies preferred: SANS, ISACA, (ICS)2, CompTIA, Cisco, CERT etc.
• Typically 6+ years of relevant experience.


Knowledge and Skills:

• In-depth Cyber and IT security knowledge.
• In-depth understanding of Cyber and IT security risks, threats and prevention measures.
• In-depth understanding of relevant programming and scripting languages (perl, python, powershell, HTML, javascript, etc.).
• In-depth security system analysis skills.
• In-depth understanding of security standards and best practices.
• In-depth risk assessment and management skills.
• In-depth understanding of networking and network security.
• In-depth understanding of network monitoring and protocols.
• In-depth understanding of one or more of the following:
o Off-the-shelf vulnerability assessment products and tools.
o Network security devices (firewalls, proxies, NIDS/NIPS, etc.).
o Platform and application-layer penetration testing techniques.
o Adversary techniques, tactics, and protocols and related countermeasures.
o Dynamic and static malware analysis techniques.
o Network security monitoring.
o Memory analysis techniques.
o Malware reverse engineering techniques.
o Digital Forensics.