Information Security Analyst Senior
About The Position
GDIT is seeking a Senior Information Security Analyst to coordinate network-host vulnerability scanning and identification, maintain vulnerability-management tools, and work with Engineering and Operations teams to drive remediation. The role applies security requirements and risk-based practices to mission systems, supports audits and examinations, and develops or updates security standards and templates as regulatory and audit requirements change. The analyst also researches, implements, tests, and reviews information security measures to protect information and prevent unauthorized access; assesses systems for weaknesses; recommends and implements improvements; and documents upgrades. This is an onsite position at Tyndall AFB, Florida, requiring a Secret clearance and U.S. citizenship.
Requirements
- U.S. citizenship is required.
- Must currently possess a Secret clearance and be able to maintain or obtain a Secret clearance.
- A bachelor's degree and 3 or more years of experience; additional experience may be considered in lieu of a degree, with 7 or more years listed as the experience qualification.
- Experience and training with Microsoft Server 2016/2019 or newer, including Active Directory, RADIUS, DNS, and Group Policy.
- Experience and training with virtual environments such as VMware or Hyper-V.
- Familiarity maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
- Familiarity maintaining and operating SQL Server.
- Experience applying patches and updates and implementing STIGs.
- Must possess and maintain at least an IAT Level II certification in accordance with DoW Directive 8140.01, such as Security+, CCSP, or CASP+.
- Knowledge of security controls, security policies and standards, system audits, and vulnerability assessments.
Responsibilities
- Manage system vulnerabilities in accordance with security requirements, using NIST continuous monitoring standards, RMF critical security controls, and risk-based countermeasures for mission systems.
- Identify and assess emergency or priority vulnerabilities using input from cyber intelligence, engineering, and operations teams, and recommend remediation approaches.
- Analyze vulnerability data and help prioritize and remediate vulnerabilities according to risk and vulnerability-management standards.
- Understand vulnerabilities, impacts, and mitigation techniques, and document and communicate this information to stakeholders.
- Update and develop security standards and templates to meet regulatory, audit, and other requirements and guidance.
- Improve enterprise vulnerability-management practices, including vulnerability identification, assessment, and remediation.
- Leverage and enhance vulnerability-management frameworks, policies, and standards to maintain industry best practices.
- Coordinate data and documentation collection in support of examinations and audits.
- Work with existing solution vendors, including ACAS and HBSS, and identify potential solutions.
- Research, develop, implement, test, and review information-security measures to protect information and prevent unauthorized access.
- Gather information necessary to maintain security and establish external barriers, such as firewalls and other security measures.
- Assess and review systems to identify security weaknesses, recommend and implement improvements, and document upgrades.
- Maintain vulnerability-scanning and analysis tools, including tools used to rationalize, consolidate, and add contextual information.
Benefits
- 401(k) with company match
- Medical plan options, including options with Health Savings Accounts
- Dental plan options
- Vision plan
- Paid education and certifications
- Paid vacation and holidays
- Paid time off, including sick and personal time
- Paid parental, military, bereavement, and jury duty leave
- Short- and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
