Cyber Security Specialist

Cybersecurity Analyst

Develops, deploys and/or maintains enterprise-wide computing and information security requirements, policies, standards, guidelines and procedures for secure, isolated environments. Advises on a broad range of compliant information security and data protection requirements. Determines acceptability of unique configurations and verifies security parameter placement. Investigates and resolves security incidents. Participates in security assessments and audits.

• Employ best practices when implementing security requirements within an information system including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Capture and refine information security requirements and ensure that the requirements are effectively integrated into information systems through purposeful security architecting, design, development, configuration and documentation for delivery to a wide customer base.
• Perform security assessments of software, including research and manual/automated testing, and document security findings and recommended mitigations.
• Educate team members on security best practices and participate in architecture meetings with application owners.
• Analyze security situations, environmental factors and business objectives. Advises on a broad range of information security issues and interprets data protection requirements. Contributes to or develops security plans to meet assurance or protection requirements.
• Analyze and documents computing security events. Identifies root causes, prioritizes threats and recommends and/or implements corrective action. Determines acceptability of unique configurations and verifies security profile settings. Tests and deploys risk mitigation processes and tools.
• Investigate, analyze and resolve security questions and issues. Tests and deploys incident response processes and tools. Leads or participates on incident response teams.
• Perform security compliance monitoring. Participates in security policy assessments and audits. Evaluates and tests security controls and applications. Contributes to corrective action planning

Requirements:

• Minimum DoD Interim Secret Clearance
• DoD 8570 Certification IAT Level 2 (Security+ Recommended)

Skills/Experience:

• Be very detail oriented and be able to manage priorities in a fast-paced environment.
• Must have solid troubleshooting skills and knowledge of common ports and protocols.
• Familiarity with NIST security standards and Risk Management Framework (RMF).
• Have a solid understanding of programming logic and API implementation.
• The ability to read, write, understand and follow instructions within an installation script is necessary.
• Must have scripting experience in at least 2 of the following: PowerShell, Python, Bash, SQL, VBScript, HTML, XML, JSON, CSV, JavaScript.
• Must have knowledge of common security tools such as: Wireshark, NMAP, and vulnerability scanners such as Nessus.
• Must have Systems Engineering and Administration experience in the following: Logging Utilities (ElastiSearch, Splunk, etc..), Enterprise Security Utilities (HIDS, NIDS, DLP), Virtualization Platforms, Windows Server services (AD, DNS, DHCP, Group Policy), UNIX/Linux/Microsoft Administration (file services, configuration, updates), Web servers (IIS, Apache), Software Installation
• Knowledge of web applications and database technologies with basic understanding of common vulnerabilities affecting these technologies (OWASP Top 10 / CWE)
• Experience installing/configuring complex Client/Server Applications that include multiple servers and/or a database is a plus