Job Details

Email to Friend Save Back

Security Analyst

ARLINGTON-22201, VA, US
01/12/2017

-

Required Skills

Oracle

Company

Infinity Consulting Solutions, Inc

Experience

Job Description

Security Control Assessor- Active Secret Clearance Required

(Arlington, VA)

Position Overview:

The cyber security analyst performs Assessment and Authorization (A&A) services in compliance with the Federal Information Security Management Act of 2002 (FISMA).

By following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), the senior cyber security analyst will perform an analysis of information technology solutions, systems, and programs within the government, health, energy, and financial industries.

Cyber security analysts will assess, analyze, and document vulnerabilities to information systems within the department in order to help the customer make informed risk-based decisions.

Primary responsibilities include:

Leading security assessments of customer systems, services, and programs, as well as provide oversight to less experienced staff.

Analyzing customer processes and configurations to verify that previously identified flaws have been corrected, and document the results.

Developing approaches for industry-specific threat analyses, application-specific penetration tests, and the generation of vulnerability reports.

Creating detailed remediation reports and recommendations for compliance and security improvements across industries based on changing threats.

Updating a consistent approach to information security programs and ensure adherence with best practices.

Required:

Bachelor’s degree or equivalent and 4+ years of related experience

Must be authorized to work in the US; Must have active Secret clearance with the ability to be granted a Top Secret clearance

Ability to clearly articulate technical requirements and other information in written documentation

Effective communication with technical and nontechnical concepts to a variety of audiences

Methodical approach to gathering, documenting, and presenting specific customer requirements

Ability to follow and comply with existing processes and procedures, and propose updates

Work with minimal supervision, set priorities, and give attention to detail and quality

Demonstrate strong organizational and time-management skills: multitasking, working individually and with a team, having a positive attitude, being self-motivated and reliable, being trustworthy, having strong interpersonal and diplomatic skills, and being able to handle stress in a professional manner

Demonstrates technical skills in one or more focus areas (i.e. networking, messaging support (Exchange), Active Directory, system administration, etc.)

Proficiency with Microsoft Office

Preferred Qualifications:

Knowledge and hands on experience with IT architecture and design (e.g., firewalls, intrusion detection systems, virtual private networking, virus protection technologies, LAN/WAN design, and/or general internetworking technologies).

Understanding of risk management practices and security program development including change management, access control, and physical security.

Understanding of the NIST Special Publications (SP) with emphasis on 800-37, 800-53, 800-53A

IP network and security engineering experience including a basic understanding of IP routing, quality of service mechanisms, MPLS, and IPsec architectures.

Hands on experience configuring, deploying, and managing mission critical network appliances such as routers, firewalls, IDS/IPS, DPI, etc.

Hands on system administration experience with various operating systems including Windows, AIX, BSD, z/OS, RHEL, SUSE, HPUX, QNX, etc.

Experience or working knowledge of DB2, MS SQL, Oracle, Sybase, etc.

Experience with various programming languages, system development lifecycles (SDLCs) and change management processes.