Computer Emergency Response Team Associate Glasgow   £Very Competitive + Excellent Benefits

Position Description

The Morgan Stanley Computer Emergency Response Team (MSCERT) is an integral part of the IT Security organization. MSCERT is a process for monitoring, assessing, and countering electronic threats to the Firm’s technical infrastructure, data, and ability to conduct business systematically. Primary functions of MSCERT include:

• Vulnerability Assessment and Response – Mapping known vulnerabilities and exploits to versions of operating system and application software used within Morgan Stanley.
• Penetration Test Management - Penetration and vulnerability testing of internal and external infrastructure. Initial tracking of pen test findings with system owners to ensure remediation in a timely fashion.
• Incident handling – Manage communication and technical aspects of security incidents.
• Security alert monitoring – Escalation of items such as failed login attempts and unauthorized password resets.
• Content filtering management – Process to enable the enforcement of company policies with regards to Internet usage and electronic communication.

Skills Required

Candidates should have a Computer Science or Information Security background.   
Position requires a specialist skillset in the area of electronic vulnerability assessment, malware and pen test handling.
Core skills would include:
• Strong knowledge of Windows OS’s from an engineering and/or support background
• Knowledge of end-point and perimeter defense technology (anti-virus, firewalls, IDS, URL filtering, etc.)
• Experience writing technical documents and presentations
• Knowledge of Internet applications (SMTP, HTTP(s), FTP, telnet, SSH, etc.)
• Knowledge of Security threats (DDoS, Phishing, Defacing, sniffing, etc.)
• Experience managing technical projects
• Ability to host meetings with technical and non-technical audiences
• Flexible, creative and a good team spirit
• Strong analytical skills
• Ability to explain difficult technical matters in easy wording
• A good feeling for confidentiality and working in a procedural matter
• Good organizational skills
• Excellent communication skills, both written and verbal

Skills Desired

• Programming experience
• Network Security experience
• Knowledge of Linux and Solaris systems
• Knowledge of network infrastructure equipment (Router, switches, DNS, Proxy, Mail, etc.)
• Experience working in the field of IT security
• Experience working in the financial services industry

Job Reference:   64214

Closing Date:     19-Mar-2010

• Print