Information Security Analyst-Event Info Mgmt(Content & Infrastructure)

The World Bank Group (WBG) Office of Information Security (OIS) provides information security services to the WBG. OIS’s mission is to protect the WBG’s information assets in a manner that supports the WBG's mission to free the world of poverty. The office develops strategy, standards and processes to protect the confidentiality, integrity and availability of WBG information assets in a manner that is commensurate with their value and risk. OIS maintains an information security program in way that respects the rights and dignity of those it serves and addresses the needs of the WBG’s business units. OIS is responsible for managing security strategy, operations and compliance activities for the WBG’s five member institutions and protecting assets that total more than $628 billion of annual investments in poor and developing countries. In addition, OIS manages security across remote sites in over 180 countries throughout globe.

The Office of Information Security is seeking a suitably qualified candidate to fill a position within the Event Information Management (EIM) Team located in Washington DC. This team is responsible for maintaining and supporting the Event Information Management system across the entire WBG (World Bank Group). The WBG selected ArcSight as the software platform for this function and has been operating this infrastructure for approximately 8 years.

Note: If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 3 year renewable term appointment.

• Develop ArcSight Content

• Develop/Maintain Knowledge Base Articles describing alert actions

• Generate adhoc reports upon request from logger or manager

• Ensure all report are completed and rerun where necessary

• Investigate and debug alerts.

• Monitor and ensure the ArcSight Infrastructure is functioning correctly.

• Perform upgrades on the ArcSight components include the connectors and various appliances

• Investigate technical issues related to ArcSight Infrastructure operations

• Review and interpret events generated by various components including firewalls, switches, application software, databases and operating systems.

• Perform package migration

• Perform Content Testing and QA

• Develop/Maintain ArcSight Content

• MS/MA degree in a technical discipline (Computer Science or Engineering preferred), with minimum of 5 years of relevant experience. BS/BA is minimum education requirement with 7 years of relevant experience.

• Proven experience in programming or scripting and code debugging.

• Working knowledge of at least one operating system (prefer Windows and/or Linux)

• Working knowledge of firewalling and networking devices

• Ability to work independently with minimum supervision

• Ability to openly share/discuss ideas and suggestions with team members

• Ability to explore and investigate new products and solutions

• High level of attention to detail and accuracy

• High ethical standard

Information Security Analyst-Event Info Mgmt(Content & Infrastructure)