Security Analyst/Administrator

TieTalent; Maryland; Remote; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a motivated Security Analyst/Administrator to enhance security measures for diverse clients. This role involves managing security monitoring, conducting vulnerability assessments, and ensuring compliance with industry standards. You will work primarily in a remote capacity, providing critical support to both government and commercial clients. The ideal candidate will possess a strong background in security protocols, excellent communication skills, and a passion for problem-solving. Join a team that values your contributions and offers a comprehensive benefits package, including health insurance and a 401(k) plan.

Benefits

Paid Vacation

Personal/Sick Days

Health Insurance

401(k)/Profit Sharing Plan

Qualifications

• Experience with security monitoring and incident correlation.
• Strong problem-resolution skills and client relationship management.
• Knowledge of compliance monitoring and security assessments.

Responsibilities

• Provide on-site and remote network integration and support services.
• Conduct evaluations and recommend security controls.
• Monitor security events and perform vulnerability assessments.

Skills

Security Monitoring

Problem Resolution

Cyber Incident Tracking

Communication Skills

Client Relationship Building

Compliance Monitoring

Education

Bachelor's Degree

CompTIA Security+

CISSP

CEH

Tools

Splunk

McAfee ePO

Symantec

Windows Server

MS Office

Job description

Job Description

Security Analyst/Administrator

For a complete understanding of this opportunity, and what will be required to be a successful applicant, read on.

Who we are: InfoStructures, Inc. is an information technology services firm located in Rockville, MD. Since 1988 we have been employing leading-edge technologies and techniques to improve the working lives of others. We are seeking an energetic, highly motivated, qualified Security Analyst/Engineer with the right attitude toward customer service. We place great value in the work our people do and in the difference their efforts make in people’s lives.

What makes us different than other IT services companies? It’s simple: the quality of our services and our attention to detail.

What experience you need:

Experience providing security services for different clients in different industry sectors. You should have:

1. Managed security monitoring
2. Applying server patches and server reboots
3. Performing security event and incident correlation using information gathered from a variety of sources within the enterprise
4. Tracking and documenting cyber incidents from initial detection through final resolution
5. Provide detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities.
6. Perform and document audit procedures, conclusions and findings in accordance with best-practice, industry and InfoStructures standards
7. Penetration testing and vulnerability assessments
8. Compliance specific monitoring including HIPAA, FDIC, etc.

Additional job requirements:

1. Superior problem-resolution skills
2. Understanding and experience working in an IT consulting environment supporting a wide range of clients, vertical markets (healthcare, finance, non-profit) with different levels of technology.
3. Ability to work in a fast-paced environment supporting multiple customers at once
4. Excellent oral and written communication skills, including an ability to deal with people at various levels, from technician to executive
5. Self-starter and highly motivated
6. Strong track record in leading a technical team and in building client relationships.
7. Ability to weigh options and provide the most efficient and cost-effective solution from a number of options.
8. Experience providing consulting to clients, with the right balance of initiative and following instructions
9. References that demonstrate these characteristics
10. Ability to understand and categorize technical problems
11. Remote and on-site problem-resolution skills
12. Strong ability to build client and peer relationships

Working knowledge of installing, configuring, and troubleshooting products in the following areas:

1. Splunk (preferred) or other security analysis tools that also include SIEM knowledge
2. Anti-Virus, various anti-spyware utilities (including McAfee ePO, Symantec, Avast/AVG)
3. 2-Factor Authentication (2FA/MFA) implementations and support
4. Windows (Servers and desktops) and 3rd party patching project, processes and methodologies
5. Microsoft Windows 2008/2012/2016/2019/2022 Server with a high-level understanding of Active Directory design and implementation with regards to security requirements related to ensuring Windows servers are protected
6. MS Office and Outlook 2010/2013/2016/2019/O365

What education/training/certification desired/requested:

1. SIEM tools - Splunk, etc. (HIGHLY PREFERRED)
2. CompTIA Security+
3. CEH
4. CISSP or other high-level security certifications
5. MCITP
6. Bachelor’s degree

What you will do

You will provide on-site and remote network integration and support services to our government and commercial clients, mostly in Windows 2008/2012/2016/2019/2022 and VMware v6/7 environments.

You are expected to:

1. Conduct on-Site evaluations + potential user interviews on potential security concerns based on way users are utilizing and working with IT
2. Examine network architecture for any changes and ensure no backdoors are open for people to exploit network
3. Discovery and recommendations on security controls in place, including but not limited to:

• Email security, Encryption, data protection and DLP
• AD policy, password management, and AD/File Audit reviews
• NAS/SAN/storage security
• Wireless security
• Firewall/Internet edge security

Recommendations and changes to existing IT security processes and procedures, including but not limited to:

• Acceptable Use Policies
• DR/COOP plans

Bi-annual high-level overview of security measures put in place along with measures to prevent security vulnerabilities.

Daily monitoring and alerting for SIEM “Splunk” & other tools which will be set up to ingest logs from all network devices (firewalls, switches, etc.), servers, desktops, WAF, and others to look for correlating security events.

Weekly patch monitoring, reporting and assessment including Windows, and 3rd party patches.

Weekly Anti-Virus configuration checks and quarantine results

Monthly vulnerability scans of entire environment including a follow-up report and recommendations.

Provide timely ongoing communications with client regarding status and resolution

Complete other duties as assigned

Where you will do it

You will work primarily remote/telework with occasional visits to our Rockville office between 9AM and 6PM (flexible with 8AM start time). After-hours work (projects, break/fix) required, but limited as much as possible.

Benefits

InfoStructures provides a comprehensive benefits package that includes paid vacation, personal/sick days, employee health insurance coverage, and a 401(k)/profit sharing plan.

InfoStructures is an Equal Opportunity Employer.