ATSG IS SECURITY ANALYST

Air Transport Services Group, Inc.•Wilmington, OH

About The Position

The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.

Requirements

Bachelor’s degree in computer science, technology, or equivalent experience
Knowledge or networks; TCP/IP, DNS, Firewalls, Windows and Linux Servers, VMWare, Nutanix, Active Directory, MFA and Encryption
Excellent planning and organizational skills
Strong written and verbal communication skills
Ability to work independently and as part of a team

Nice To Haves

Certification such as Security +, CISSP, CEH are a plus
Experience with NIST, CMMC and Sox requirements are a plus
Experience with anti-virus, threat analysis and security testing tools are a plus
Ability to contribute to DR planning a plus

Responsibilities

Assist in the development of a NIST 800-171 / CMMC Cybersecurity policy
Develop system security plans
Perform GAP Analysis
Recommend security enhancements to management and I.T. staff
Coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments
Remediate vulnerabilities within the network
Serve as liaison to 3rd party security managed services
Be an internal subject matter expert and/or project lead for all current and future cyber security initiatives
Work with technology to secure computer and network systems
Install SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations
Analyze the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures