NetWitness - Professional Services Consultant

NetWitness - Professional Services Consultant

As one of the most established cybersecurity companies in the world, we at NetWitness are hard at work every day helping our customers and partners better protect their organizations from cyberattacks. Our products and services are used within most large enterprises, governments and militaries for incident response and threat hunting. Our Sales Professionals, Sales Engineers, and Professional Services Consultants design and deliver solutions for potential and existing customers to enable better visibility, insight and action to prevent and defend against attacks.

NetWitness provides the unique ability to provide one single platform with a unified view across all attack surfaces including Network, Logs/SIEM, Endpoint, and IoT combined with our AI-based User and Entity Behavioral Analysis (UEBA) and Security, Orchestration, Automation & Response (SOAR) capabilities.

This position is a remote/work from home position anywhere in the continental US.

Principal Accountabilities:

Work with customers to better enable their ability to detect threats and respond.

Utilizing consultative soft skills and knowledge of the threat landscape, establish and maintain trusted customer relationships while working closely with them to improve their security posture.

Install, customize, and operationalize the NetWitness Product

Develop custom integrations and parsers

Understand storage concepts and configure storage to CentOS hosts

Develop detection content and use cases within the Netwitness product

Understand assessing customer gaps in log, packet, and endpoint visibility and provide next step recommendations

Support with pre and post-sale opportunities to help demonstrate advanced usage of the NetWitness product suite, while also providing an opportunity for knowledge transfer and enablement of clients and internal RSA staff

Perform research and develop techniques to identify and mitigate threats, staying abreast of emerging threats

Develop creative solutions to solve customer issues

Deploy solutions in the cloud

Automate tasks through custom scripting and product features to increase SOC efficiency

Travel up to 20% although primarily remote

Skills:

Excellent written/verbal communication and interpersonal skills

Consultative and leadership qualities. Ability to lead technical projects in large enterprise environments.

An understanding and application of the MITRE ATT&CK framework

Expertise in at least one of the following domains: Network Forensics, Host Based Forensics, Log Analysis

Basic threat intel analysis

UNIX/Linux expertise, Specifically CentOS

Programming/Development language skills (Python, JS, etc.)

AWS experience and terraform experience

Ability to converse in Spanish a plus (Conversational Spanish) although not required

Federal Clearance a plus although not required

 

RSA is committed to the principle of equal employment opportunity for all employees and applicants for employment and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RSA are based on business needs, job requirements and individual qualifications, without regard to race, color, religion, national origin, sex (including pregnancy), age, disability, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, protected veteran status, genetic information, or any other characteristic protected by federal, state or local laws. RSA will not tolerate discrimination or harassment based on any of these characteristics. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. All RSA employees are expected to support this policy and contribute to an environment of equal opportunity.

 

If you need a reasonable accommodation during the application process, please contact rsa.global.talent.acquisition@rsa.com. All employees must be legally authorized to work in the US. RSA and its approved consultants will never ask you for a fee to process or consider your application for a career with RSA. RSA reserves the right to amend or withdraw any job posting at any time, including prior to the advertised closing date.