Cyber Security Analyst

28 Jun 2024

Vacancy expired!

Mandatory Qualifications: At least 12 years of IT security experience of which a minimum of three years must be in a senior position. Required aria-hidden="true" Determining and implementing cybersecurity and privacy principles to organizational requirements. aria-hidden="true" Strong background in documenting and assessing NIST 800-53 and CJIS controls. aria-hidden="true" Experience developing incident response process and procedures with internal and external stakeholders. aria-hidden="true" Knowledge of processes for seizing and preserving digital evidence. aria-hidden="true" Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) aria-hidden="true" Knowledge of system and application security threats and vulnerabilities. aria-hidden="true" BS/BA undergraduate degree. 

Desired Qualifications: Experience building defensible security architectures for operational technology with a focus in cloud security best practices aria-hidden="true" Experience with defining, establishing and directing techniques for detecting host and network-based intrusions using intrusion detection technologies aria-hidden="true" Writing business/process documentation, developing models and graphics and making oral presentations to senior officials aria-hidden="true" Overseeing and interfacing directly with agency and interagency leaders during cyber incidents. aria-hidden="true" Assessing and providing strategic direction for resolution of mission-critical problems, policies, and procedures. aria-hidden="true" Knowledge of NIST’s Cybersecurity Framework (CSF) with a focus on response and recover control families. aria-hidden="true" Experience developing disaster recovery and continuity of operations policies, plans, and procedures. aria-hidden="true" Strong understanding of vulnerability scanning solutions, and the ability to clearly document the associated risks and remediation timelines. aria-hidden="true" Knowledge of malware with virtual machine detection. aria-hidden="true" Knowledge of anti-forensics tactics, techniques, and procedures. aria-hidden="true" Knowledge of legal governance related to admissibility (e.g. Rules of Evidence). aria-hidden="true" Knowledge of types of digital forensics data and how to recognize them. aria-hidden="true" Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. aria-hidden="true" Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code) aria-hidden="true" Knowledge of malware analysis tools (e.g., Oily Debug, Ida Pro). aria-hidden="true" Knowledge of DDoS appliances such as NetScout Arbor, Fortinet FortiGate. aria-hidden="true" Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations aria-hidden="true" Valid CISSP Certification Thanks & RegardsKaifi Azami

  • ID: #43654342
  • State: New York Nyc 10001 Nyc USA
  • City: Nyc
  • Salary: Depends on Experience
  • Job type: Contract
  • Showed: 2022-06-28
  • Deadline: 2022-08-25
  • Category: Et cetera