Information Security Architect

Job Profile Summary Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. The ideal candidate will be knowledgeable in both on premise and cloud security architecture and have experience with the implementation and configuration of security tools. They will be able to provide insights and recommendations surrounding web applications and cloud-based solutions. They should be able to provide documentation to management as needed. Duties and Responsibilities: Monitors and analyzes Intrusion Detection Systems (IDS) to identify security issues for remediation Recognizes potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information Evaluates firewall change requests and assesses organizational risk Communicates alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems Design, integrate, and implement information systems security infrastructure Analyzes the information systems to ensure that appropriate security functions have been included in the systems design and architecture Recommend and implement changes to enhance systems security and prevent unauthorized access Research security trends new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach Provide guidance and direction on best practices for the protection of information Safeguards the network against unauthorized infiltration, modification, destruction or disclosure Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, and telecommunications Develop policies and procedures to prevent unauthorized access Provides recommendations to clients on information assurance engineering standards, implementation dependencies, and changing information assurance related technologies Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information Performs preliminary forensic evaluations of internal systems Provides guidance in the creation and maintenance of Standard Operating Procedures and other similar documentation Education: BA/BS or equivalent from an accredited university is required. Must one more of the following certifications: ISACA - Certified Information Systems Auditor (CISA) ISACA - Certified Information Security Manager (CISM) (ISC)2 - Certified Information Systems Security Professional (CISSP) (ISC)2 - Certified Cloud Security Professional (CCSP) #J-18808-Ljbffr