Information Security Analyst

Job Description

Job Description

Benefits:

• HSA & FSA
• 401(k)
• 401(k) matching
• Dental insurance
• Employee discounts
• Health insurance
• Paid time off
• Tuition assistance
• Vision insurance
• Wellness resources

Description

At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.

We are seeking an experienced Information Security Analyst to join our IT Security team and help protect the systems that support our mission. This role monitors, evaluates, and maintains the safeguards for information systems, networks, databases, and web-based assets across on-premises and AWS cloud environments, and produces reporting on risk, vulnerability management, and security incidents.

Responsibilities

• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
• Evaluate firewall change requests and assess organizational risk
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Assist with implementation of countermeasures or mitigating controls
• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
• Maintain PCI-DSS certification for the IT system on an annual basis
• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
• Research, evaluate, test, and implement new security software or devices
• Conduct investigations of information systems security violations and incidents, reporting to management as necessary
• Implement, enforce, communicate, and develop security policies and plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programs
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Advise management on the business impact of theft, destruction, alteration, or denial of access to information
• Provide information assurance project management, technical security staff oversight, and development of mission-critical technical documents
• Ensure compliance with regulations and privacy laws
• Develop materials for computer security education/awareness programs
• Respond to queries and requests for computer security information and reports
• May serve as a team or task lead

Requirements

• Bachelor’s degree (BA/BS) or equivalent
• Minimum 10 years of IT Security experience
• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
• Experience implementing and configuring IDS, vulnerability scanning, SIEM , and other security tools
• Knowledge of best practices for designing and implementing secure network architecture
• 2+ years of AWS experience (required)
• Experience with security incident handling (preferred)
• Clear written and oral communication skills
• Ability to troubleshoot and solve complex technical problems

Required Certifications

• Current certification in one or more of the following:
• ISACA – Certified Information Systems Auditor (CISA)
• ISACA – Certified Information Security Manager (CISM)
• (ISC)² – Certified Information Systems Security Professional (CISSP)
• (ISC)² – Certified Cloud Security Professional (CCSP)
• AWS Solutions Architect

DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.