Information Security Analyst

DANE LLC•ARLINGTON, VA

1d•$150,000 - $170,000

About The Position

At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued. We are seeking an experienced Information Security Analyst to join our IT Security team and help protect the systems that support our mission. This role monitors, evaluates, and maintains the safeguards for information systems, networks, databases, and web-based assets across on-premises and AWS cloud environments, and produces reporting on risk, vulnerability management, and security incidents.

Requirements

Bachelor’s degree (BA/BS) or equivalent
Minimum 10 years of IT Security experience
Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools
Knowledge of best practices for designing and implementing secure network architecture
2+ years of AWS experience (required)
Clear written and oral communication skills
Ability to troubleshoot and solve complex technical problems
Current certification in one or more of the following: ISACA – Certified Information Systems Auditor (CISA), ISACA – Certified Information Security Manager (CISM), (ISC)² – Certified Information Systems Security Professional (CISSP), (ISC)² – Certified Cloud Security Professional (CCSP), AWS Solutions Architect

Nice To Haves

Experience with security incident handling (preferred)

Responsibilities

Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
Evaluate firewall change requests and assess organizational risk
Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
Assist with implementation of countermeasures or mitigating controls
Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
Maintain PCI-DSS certification for the IT system on an annual basis
Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
Research, evaluate, test, and implement new security software or devices
Conduct investigations of information systems security violations and incidents, reporting to management as necessary
Implement, enforce, communicate, and develop security policies and plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programs
Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
Advise management on the business impact of theft, destruction, alteration, or denial of access to information
Provide information assurance project management, technical security staff oversight, and development of mission-critical technical documents
Ensure compliance with regulations and privacy laws
Develop materials for computer security education/awareness programs
Respond to queries and requests for computer security information and reports
May serve as a team or task lead