Security Analyst

Security Analyst

Assists in developing specifications as well as, overall planning and management of projects.

Meets with leadership to provide status reports on a weekly basis and provides monthly written reports which will include accomplishments, areas of concerns, and recommended solutions.

Communicate project progress and information to team, sponsor, stakeholders, and legislative body as appropriate.

Ensures technical direction and standards are being followed.

Develops project plans and measures actual progress against the plans.

Assures that project documentation includes the project plans, budgets, risk plans, communication plans, change control logs, and reports.

Demonstrates an understanding of tactical goals and effectively participates in the development and implementation of business solutions.

Manages project risk through comprehensive mitigation assessment and planning techniques.

Manages change control within the projects.

Obtains sponsor approval for changes to scope, budget, and schedule that effect the critical path.

Written documentation showing testing and verification of modifications to ensure that objectives are met.

Required: 3+ years experience in IT security related responsibilities for networks, servers, and workstations.

1+ years experience in IT security related processes assessing risk and developing security strategies to best meet business needs while ensuring confidentiality, integrity, and availability of information.

Experience producing information security related documentation addressing procedures, standards, and guidelines to ensure information security. E.g., Procedure to address the containment, eradication, and restoration of a workstation compromised by a Trojan that was not detected by anti-virus software.

Experience in developing security measures. E.g., Developed a process that streamlined containment of infected workstations, or developed a process creating greater accountability and mitigations for security exceptions.

Experience in working independently (taking initiative) while working in a team environment (cooperating with team members and supporting team members).

Experience in addressing cyber security incidents that resulted in timely eradication of the cause and restoration of business processes.

Ability to communicate effectively – oral and written.

Experience in Pen Testing.

Experience in writing and/or developing system security plans.

Experience in using information security tools such as vulnerability scanners, sniffers, log monitoring, etc. E.g.

Back Track, Nessus, Sysinternals, Wireshark, NetStumbler, etc.

Experience in security monitoring that included configuration, analysis, assessment, and response.

Experience in working with third parties to coordinate, monitor, respond to and coordinate cyber security threats, incidents, and mitigations and responses.