Vacancy expired!
Security Analyst- TS/SCI Eligible
- Cyber Security incident alerts
- TCP/IP and Networks
Contract: 6+ MonthsLocation: Arlington, VASummary:Respond to cyber security incident alerts, ensuring the business is efficiently defended against any and all potential cyber security threats.Job Responsibilities: Under general supervision, operate all aSPCts of Information Systems, data availability, integrity, authentication, confidentiality, and non-repudiation. Implement and monitor security measures for communication systems, networks, and provide advice that systems and personnel adhere to established security standards and Governmental requirements for security on these systems. Develop and execute security policies, plans, and procedures implement data network security measures operate Network Intrusion Detection and Forensics handle Information Systems security incidents support COOP/DR plans and perform certification of Information Systems and Networks. Operate Electronic Key Management System, other information security duties, and Public Key Infrastructure. Operate Host Based Security System (HBSS), firewalls, Intrusion Prevention Systems, Intrusion Detection Systems, other point of presence security tools, Virtual Private Networks, and related security operations. Certified in accordance with DODD 8570.1 Information Assurance Technician II. Monitor Cybersecurity alerts though the use of a Security Information and Event Manager (SIEM) to triage, mitigate and escalate issues Coordinate the initial investigation workflow and response Work closely with engineering staff to ensure they are actively engaged refining and tuning sensors Provide round-the-clock support for global security operationsSkills: Great problem-solving skills, curiosity, tenacity, and resilience to resolve issues A solid foundational understanding of TCP/IP and networks to include packet analysis, firewalls, routers, and ACLs Strong working knowledge of malware in its varying forms, common delivery mechanisms, and common mitigation steps Ability to convey security concepts related cybersecurity events to both technical and non-technical audiences Ability to communicate and collaborate with other team members in a dynamic workforce Experience with IDS/IPS, Endpoint protection, Network Security, WAF, Sandboxing and analysis toolsets. Experience operating and administrating Security Information and Event Management (SIEM) platforms a plus Direct security operations experience is key; Forensics or Penetration Testing background a plusEducation/Experience: Degree educated or equivalent, preferably in a computer science related subject GCIH IA qualifications a plus 5-7 years' experience Contractor shall act as an advocate functioning as the primary security advisor as it pertains to Identity and Access Management. The Government estimates successful performance of this Task will require the efforts of one (1) Journeyman Information Security Analyst.Work under this Task includes: Working with assigned clients (and with other security teams) to assist in developing and maturing their security policies and procedures to improve the overall security partnership; Participating in, and monitoring, implementation meetings and progress to ensure security needs and expectations are being met; Tracking and monitoring upcoming feature releases, product changes and enhancements; Assisting in operational security services escalation management; Providing client and internal executive summaries and/or security and risk reporting as it pertains to certificates issued by CISA, as required; Issuing PKI certs and tokens.
- ID: #49903545
-
State: Virginia
Arlington
22201
Arlington
USA
- City: Arlington
- Salary:
USD
TBD
TBD
- Job type: Permanent
- Showed: 2023-05-10
- Deadline: 2023-07-08
- Category: Security