Information Systems Security Analyst

Title:Information Systems Security Analyst

Location: Dahlgren, VA

*Clearance: Active Secret Clearance needed to apply

Company Overview

Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we continually focus our attention on improving the overall work/life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation’s toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don’t look any further than Cornerstone Defense.

Benefits Overview

• Medical, Dental and Vision Plans
• Generous PTO Policy
• 401(k)
• HSA and FSA options
• Life and Disability Insurance
• Tuition Reimbursement and Training
• Perks at Work Discount Program
• Referral Program
• Leads Generation Program
• CollegeAmerica 529
• Fitness Reimbursement Program
• Travel Assistance
• Norton Lifelock Benefit Solutions
• Life Planning Financial & Legal Services

• Four (4) years of experience in Cybersecurity.

Core Competencies

• Cybersecurity principles, threats, vulnerabilities, and risk management processes
• Encryption algorithms (IPSEC, AES, GRE, IKE, MD5, SHA, 3DES)
• Data backup/recovery tools and disaster recovery planning
• Host/network access controls (ACLs)
• Incident response and intrusion detection methodologies
• Network traffic analysis andprotocols (TCP/IP, OSI, ITIL)
• System/application threats (buffer overflow, cross-site scripting, SQL injection)
• Security architecture and enterprise reference models
• National/international cybersecurity laws, policies, and ethics
• Penetration testing principles, tools, and techniques

Technical Proficiency

• Networking concepts, protocols, and security methodologies
• System performance monitoring and ISO standards
• System life cycle management, software security, usability
• System/server administration and engineering methods
• Server/client operating systems
• Network security architecture (topology, defense-in-depth)
• Network systems management tools
• System administration,network, and OS hardening techniques
• Cloud computing models (SaaS, IaaS, PaaS) and cloud security strategies
• Data security standards (PII, PCI, PHI)

Leadership & Management

• Information security and project management principles
• Resourcemanagement techniques
• Risk assessment and mitigation processes
• Secure acquisitions, procurement, and supply chain risk management
• IT supply chain security andcompliance with laws, directives, and guidelines
• Organizational risk tolerance andmanagement approaches
• Critical IT procurement requirements