Description

You will proactively identify, investigate, and document rogue IP addresses to maintain enterprise network integrity.

This role is remote.

Responsibilities

• Monitor network traffic and logs to detect unauthorized or suspicious IP addresses.
• Investigate alerts and anomalies involving unauthorized devices, misconfigured endpoints, or external threats.
• Collaborate with network and security teams to isolate and remediate rogue IPs in real time.
• Document all findings, actions, and resolutions in ServiceNow to ensure traceability and compliance.
• Support audits and compliance reviews by providing logs and reports from monitoring tools.

Required Skills

• 8+ years of experience in network security or related roles.
• Proficiency with Splunk for log analysis and monitoring.
• Experience using Wireshark for network traffic investigation.
• Hands-on experience with SolarWinds.
• Strong working knowledge of ServiceNow for incident documentation and workflow management.
• Ability to track and document findings for audit and remediation purposes.
• Experience investigating unauthorized device activity and endpoint misconfigurations.

Preferred Skills

• Participation in threat hunting exercises.
• Contribution to detection rules and response playbooks.

Key Skills

Education

Any Gradute