Information Security Analyst - Arlington, United States - USfalcon, Inc.

USfalcon, Inc.

Verified Company

Arlington, United States

3 weeks ago

Posted by:

Mark Lane

beBee recruiter

Description

We have an exciting opportunity to join us in supporting one of our valued customers as an
Information Security Specialist to work out of
Arlington, VA.

Hybrid

Essential Duties:

Lead mitigation / remediation process, following approved corrective action plans
Support program to ensure appropriate implementation of the NIST Security Framework through the lifecycle of the system including but not limited to the presecurity assessment tasks and coordination with System Owners (SO)
Responsible for coordinating with internal stakeholders and external vendors to gather requirements and execute cyber related tasks
Coordinate and facilitate preassessment meetings with stakeholders
Experience integrating diverse data streams and perform detail analysis
Establishes data standards and acts as custodian of IT security and service delivery data sets and streams
Experience in analyzing complex networks and systems from a security standpoint
Experience in analyzing log data from various network components and operating systems as well as packet capture data
Knowledge of the complex environment involving shared networks and multiple security enclaves
Systems Engineering with network analyst\\engineering background
Network security background with ability to analyze log data as well as familiarity of how to generate logs and metrics from product suites, such as Cisco, AirWatch, and desktop\\server OS
Ability to manage and troubleshoot data feeds, Splunk familiarization
Support process improvement and special project activities requiring engagement and collaboration with a variety of functional teams
Responding to data calls by gathering and analyzing pertinent information, forming conclusions, developing solutions and implementing plans
Create, document, review and edit as appropriate (new and existing) system security documents for completion and accuracy (to include but not limited to SCD, SSP, SIA, PIA, PTA, POA&M, Disaster Recovery Plan/DRP, etc.) to ensure security requirements are included

Who you are:

Energized when faced with complex technical challenges and diligently work to identify creative solutions.
Ability to perform high quality work, both independently and with a team, in a fastmoving environment.
Ability to plan and prioritize tasks to successfully meet/exceed customer expectations.

Required Qualifications:

57 years of experience working on IT security protocols and RMF Framework
Bachelor's degree
A Certified Authorization Professional (CAP) or Systems Security Certified Practitioner (SSCP) while progressing toward a senior certification of CISSP and/or CISA
Experience with JIRA
Ability to obtain a Public Trust clearance.
Proficient in Microsoft Office suite of tools including SharePoint; aptitude for quickly learning related tool sets.

Preferred Qualifications:

Security Development and Operations (SecDevOps)
Expertise with Splunk
Scripting tools to include Python, ShellScript, or Ansible
Cloud security controls and implementation
PKI implementation
STIG compliance and vulnerability management
Virtualization experience (VDI & VMWare)
Public, private and hybrid Cloud experience (AWS, Microsoft Azure, etc.)
CISSP
AWS Certified Security Specialty
Microsoft Office365

Education/ Certification:

Bachelor's degree

in related field

Required Clearance:
Ability to obtain Public Trust

Travel:

TBD
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

41 CFR c)