Security Analyst (83243)

Centurion Health•Sterling, VA

5d•Onsite

About The Position

Centurion is proud to be a leading provider of comprehensive healthcare services to correctional facilities, state hospitals, and community mental health centers nationwide. We are currently seeking a Security Analyst to join our IT team in Sterling, Virginia. The Security Analyst will be part of the dynamic security team and responsible for actively monitoring security threats and risks involving client infrastructure. This includes timely review of alerts generated by devices, assessment of the situation, and notification to IT leadership staff. Work within IT and vendors to produce effective technical solutions which provide visibility and response efficiencies in support of an intelligence-driven computer network defense and incident responses. Perform vulnerability and security scans of existing production network components, paths, networks, sub-networks, systems and software as required. Research new threats and conduct risk assessments and analysis.

Requirements

Ability to use common any scripting languages like PowerShell, Perl or Python
Ability to use SIEM tools like Splunk/Chronicle for network monitoring and analysis, threat response, DLP and work with other Information Security tools.
Possess excellent written and verbal communication skills, presentation, and problem solving skills.
Be able to interact well with peers and internal customers.
Work in team environment with other teams on complex technical issues.
Ability to communicate complex technical concepts and project information clearly and concisely to both technical and non-technical audiences.
Ability to work in an environment with evolving requirements and dynamic schedules.
Strong ability to inspire cooperation, confidence, and motivation of a team in a stressful environment.
Bachelor’s degree in Computer Science, Information Systems or equivalent experience
5 years or more of progressively responsible experience working in Information Security with a strong background in network centric and/or systems administration environment.
Knowledgeable with information security threat landscape, including technical know-how of the most prevalent vulnerabilities, threats, attack methods, and infection vectors.
Understanding and promoting the compliance of the endpoint landscape.
Demonstrated experience with security incident responses/tickets handling situation.
Experienced with security log analysis.
Solid understanding of network basics like IP addressing, network protocols, ports, etc. and network device operation likes switches, routers, firewalls, etc.
Demonstrated experience in monitoring and analyzing logs, syslogs as well as alerts from a variety of tools/technologies like Splunk/Chronicle, Network devices, Proxies, etc. in computer network intrusion/detection environment.
Experience of scanning tools such as NMAP, Nessus, TCPDump, Wireshark, Netcat, etc
Working knowledge of identified operating system platforms, routers/switches, network protocols, and network infrastructure
Experience documenting and maintaining security procedures

Nice To Haves

Azure SecOps knowledge (preferred, not required)
Must have a desire to grow and improve information security skills
CCNA
SIEM experience (Splunk, Chronicle, Qradar) is preferred
CompTIA Security+

Responsibilities

Conduct daily review of ticketing system for required response to incidents, events, actions, and requirements.
Provide management of assigned actions in accordance with prescribed timelines
Daily monitoring of infrastructure including network, physical and virtual servers and appliances for security alerts
Fulfill routine communication requirements, including system documentation and status reporting and creating/updating procedural documentation.
Utilize Ticketing system to document and manage change requests, client requests and issues.
Ability to follow and adhere to simple and complex instructions, including Standard Operating Procedure (SOP).
Willingness and ability to travel. (5-10%)
Flexibility for evenings, weekend and/or Holiday work, as needed.
On-call availability is a core function of this role.
Other duties as assigned.