Information Security Analyst

Compqsoft Inc; Durham (NC); On-site; USD 70,000 - 100,000; Full time

Job summary

An established industry player is seeking a dedicated Information Security Analyst to join their team. This role is crucial in safeguarding digital infrastructure and ensuring compliance with cybersecurity regulations. You will be responsible for implementing security measures, conducting audits, and responding to security incidents. The position offers a unique opportunity to work in a charming coastal town while supporting vital operations for the US Coast Guard. If you have a passion for cybersecurity and a desire to make a difference, this is the perfect role for you.

Qualifications

• 5+ years of experience in Information Security as an analyst or in security operations.
• IAM-II Level certification required for this role.

Responsibilities

• Plan and implement security measures for computer networks and information.
• Respond to security breaches and perform risk management audits.

Skills

Information Security

Risk Management Framework

Security Information and Event Management (SIEM)

Active Directory

UNIX

Windows

Relational Databases

Cybersecurity Risk Assessment

Education

Bachelor’s or Associate Degree in Computer Science or related field

IT Certification

Tools

Security Auditing Tools

Vulnerability Assessment Tools

Job description

Information Security Analyst – Journeyman

Would you like to live and work in a community outside the hustle and bustle of a large metropolitan area but yet close enough to all the big city amenities? The quaint, coastal town of Elizabeth City, NC with plenty of southern charm will make you feel at home in no time! With its unique location in Northeastern North Carolina, it is a short drive full of waterways and woodlands to the beaches of the Outer Banks, the nearby big cities of Hampton Roads, and the entertainment and recreation opportunities of the Virginia Peninsula. Also, Richmond, VA and Raleigh/Durham, NC are three hours away and the Washington, DC metropolitan area is four. Come live the Southern coastal life and experience the satisfaction of supporting the vital and life-saving work of the US Coast Guard.

Position Requirements:

1. Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
2. Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.
3. Respond to computer security breaches and viruses.
4. Perform security and risk management audits.
5. Evaluate and validate technical processes used to support authorization and assessment activities to assure the systems meet the organization’s cybersecurity requirements.
6. Perform actions as risk management framework for all systems including government cloud.
7. Develop training, processes, and procedures to support the transition.
8. Assess security risks of systems, applications, processes with emphasis on cybersecurity risks against common control frameworks and regulations.
9. Recommends information assurance/security solutions to support customers’ requirements.
10. Identifies, reports, and resolves cyber security violations.
11. Designs, develops, engineers, and implements solutions that meet security requirements.
12. Provides integration and implementation of the computer system security solution.
13. Analyzes general information assurance and cyber security-related technical problems and provides basic engineering and technical support in solving these problems.
14. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
15. Experience in functional and systems analysis is required.
16. Assist the Security Controls Auditor in validating the security controls and the Risk Management Framework.
17. Conduct an analysis of system vulnerability management, remediation solutions, and develop the necessary POAMs.
18. Evaluate, tests, monitor, and maintain information security policies, procedures and systems such as hardware, firmware, and software.
19. Ensure the risk analysis is consistent with applicable regulations and policies, while also ensuring the analysis will support internal or external compliance.
20. Draft correspondence, reports, white papers, minutes, spreadsheets, communications products, briefs, and other documentation as needed.
21. Identify and develop methods, plans, and documents to streamline operating procedures, reports, and systems to improve operations, achieve savings, and encourage long range planning to assure the program/project produces results in a cost-effective manner.

Requirements

Education/Qualifications:

1. Bachelor’s or associate degree in Computer Science, Math, Information Technology, Engineering, or related field or at minimum IT Certification.
2. Five (5) years' experience is equivalent to five (2) years of education.

Certification:

1. This is an IAM-II Level/. MUST possess any IAM-II Level or equivalent.

Minimum Qualifications:

1. Five (5) years of experience in Information security as analyst or in security operations.
2. Five (5) years of experience with Security Information and Event Management (SIEM).
3. Five (5) years of experience in the risk management framework.
4. SECRET Clearance required.
5. Basic knowledge of the following: Active Directory, UNIX, Windows, Relational Databases.