SME Information Security Analyst

Halvik; Alexandria (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company matching

Paid time off 11 federal holidays

Job summary

Halvik Corp is seeking a seasoned Scrum Master to lead a team of Security Operations Specialists in delivering timely, compliant security operations services across multiple US government contracts. The role requires deep expertise in Security Operations, Agile practices, and effective communication with technical and executive stakeholders.

The candidate should hold a BS in a technical field, 10+ years in security operations, and a ScrumMaster Certification.

Qualifications

• BS required in computer science, information systems, engineering or related technical field.
• 10+ years experience in Security Operations.
• ScrumMaster Certification.
• Strong experience with Agile practices.
• Excellent written and verbal communication skills.
• Experience with reporting – End of Life and exploits.
• Experience with impact assessments.
• Familiarity with FISMA and NIST controls and guidance.

Responsibilities

• Perform Scrum Master duties and manage a team of Security Operations Specialists.
• Produce high-quality contractual and customer-delivered outputs on time.
• Monitor security systems and respond to alarms and incidents within SLA.
• Analyze tool outputs to support Operations Security on vulnerabilities and POA&M progress.
• Communicate operational status and plans across technical, leadership and customer audiences.
• Provide guidance on A&A security assessments and NISt controls.

Skills

Scrum Master

Agile practices

Excellent communication

Reporting (EOL & exploits)

Impact assessments

NIST controls familiarity

Security operations

Operational communication

A&A security assessments support

Education

BS in CS/IS/Engineering

Tools

Tenable

DBProtect

HP WebInspect

Linux scripting

Regex

Job description

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Roles and Responsibilities:

• Perform Scrum Master duties and Management / Oversight of a team of Security Operations Specialists
• Produce high quality contractual and customer-required deliverables on time with minimal errors
• Monitoring security systems and responding to alarms and incidents in a timely SLA-based manner. This may include End of Life and exploits reporting, FISMA reporting, generating reports of analysis and discrepancies from background processes, log files, bath systems, scheduled production reports and/or workflow logs
• Analyzing assorted tool output in order to support implementation of Operations Security, concerning vulnerabilities, POA&M progress, and other activities
• Assisting in communicating on operational status, establishing communication plans, and providing written and oral communication across technical, executive, leadership, and customer audiences
• Providing support of Operations Security and Remediation Team's role – providing technical advice and NIST based information on assurance governance guidance;
• Providing technical support for annual AuthorizationAccreditation (A&A) security assessments
• Analyzing vulnerability and compliance scans for false positive identification and evaluate in terms of operations system data
• Track and establish root cause of vulnerabilities that are not resolved in a timely manner
• Review/Update/Create system security configuration baselines
• Support incident response activities, tracking, identifying host owners, and coordinating information with other internal teams
• Help define and prioritize actionable timely recommendations for addressing compliance and vulnerability issues for network, operating systems, middleware, databases and applications

Required Skills and Education:

• Education: BS in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline
• 10+ years experience relevant to Security Operations
• ScrumMaster Certification
• Strong experience with Agile Practices
• Excellent written and verbal communication skills
• Experience with Reporting – End of Life, EOL< and exploits (exploit reporting requires technical background to manage data, understand scanning system and output, etc)
• Experience with impact assessments
• Familiarity and experience with FISMA systems and NIST controls and support on how to implement them; familiarity with all the NIST A&A documents and how to use them
• Familiarity with networking, operating system, and middleware builds (configuration baselines)
• Familiarity with CLOUD and FISMA processes (i.e. customer control matrices, security tools and options)
• Familiarity with DHS Binding Operational Directives

Preferred Skills:

• USPTO experience preferred
• ITIL-related certifications, project management certifications are a plus
• Regex for understanding / editing scan signatures
• Scripting for Linux
• Tenable, DBProtect, HP WebInspect
• CSAM, the official cybersecurity repository
• Network operations and security (Juniper, Cisco, F5, etc)
• IPv6
• Certificates / PKI Implementation
• Web security secure architecture
• Database security: Oracle, MySQL, Microsoft SQL Server, NoSQL DB's
• Windows Operating System security

Benefits:

• Company-supported medical, dental, vision, life, STD, and LTD insurance
• Benefits include 11 federal holidays and PTO
• Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements.
• 401(k) with company matching
• Flexible Spending Accounts for commuter, medical, and dependent care expenses
• Tuition Assistance
• Charitable Contribution matching

Equal Opportunity Employer:

Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.