Information Security Analyst Principal

Remotedxb; Dubai; On-site; AED 240,000 - 360,000; Full time

Benefits offered by this job

Remote work

401K

Wellness plan

Education & certs

Paid leave

Job summary

Remotedxb seeks a seasoned IT Security professional to support DHHS information security and shape future security programs. The role involves designing and implementing firewalls, assessing system security in design, and guiding remediation of findings.

Candidates should have senior-level IT security credentials, Agile SDLC familiarity, and knowledge of NIST/FIPS policies, with the ability to liaise between GDIT and customer security teams.

Qualifications

• Bachelor's degree in IT security, CS or related field with 10 years experience (or higher degrees with fewer years).
• Experience implementing and monitoring IT security programs.
• Familiarity with Agile SDLC and data security administration.

Responsibilities

• Provide support for DHHS information security.
• Facilitate security infrastructure and define future programs.
• Design and implement firewalls and related security issues.
• Analyze information systems for security functions in design/architecture.
• Conduct security impact assessments for development changes.
• Implement countermeasures or mitigating controls.
• Manage responses and remediation of POAMs.
• Stay informed on emerging security requirements like Zero Trust and SBOM.
• Act as conduit between GDIT and customer security organizations.

Skills

IT Security

Security architecture

Firewall design

Security assessments

Mitigation controls

POAM remediation

Zero Trust

SBOM awareness

GDIT liaison

Education

Bachelor's in IT Security/CS

Tools

CISSP or CISA

FIPS/NIST standards

Job description

Responsibilities

• Provide support for DHHS information security
• Facilitate security infrastructure and define future programs
• Design and implement firewalls and related security issues
• Analyze information systems for appropriate security functions in design and architecture
• Conduct security impact assessments for development changes
• Implement countermeasures or mitigating controls
• Manage responses and remediation of POAMs
• Stay informed on emerging security requirements like Zero Trust and SBOM
• Act as a conduit between GDIT and customer security organizations

Requirements

• Bachelor's Degree in IT Security, Computer Science, or related technical discipline with 10 years experience (or Master's with 8, or PhD with 6)
• IT Security implementation and monitoring experience
• Familiarity with Agile SDLC methodology
• Expert knowledge of data security administration principles
• Understanding of network configuration and monitoring
• Knowledge of federal security policies including FIPS 199, FIPS 200, and NIST 800-53
• Security certification such as CISSP or CISA

Preferred Qualifications

• Familiarity with Electronic Healthcare technology and operations
• Knowledge of VistA or RPMS electronic health records
• Understanding of HHS Enterprise Performance Life Cycle (EPLC)
• Familiarity with Source Code Control/Version Management software

Benefits

• Full-flex work week with core hours
• 401K with company match
• Comprehensive health and wellness packages
• Professional growth opportunities including paid education and certificationsPaid vacation, holidays, and parental leave
• Remote work options