Systems Security Analyst

ShorePoint•Herndon, VA

1d•Remote

About The Position

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. We are seeking a Systems Security Analyst (intermediate) with experience supporting the integration, testing, operations and maintenance of systems security. The ideal candidate has experience applying cybersecurity principles, assessing system security implementations, and supporting monitoring activities to identify vulnerabilities and security risks across systems and databases. The Systems Security Analyst role focuses on analyzing system and organizational security posture, evaluating security controls and supporting cybersecurity risk management activities across the system lifecycle. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

Requirements

Experience assessing security controls and security system designs using cybersecurity frameworks and principles (for example CIS Critical Security Controls, NIST SP 800 series or the Cybersecurity Framework).
Understanding of vulnerability identification, security testing methods and vulnerability scanning practices and monitoring of systems and database environments.
Knowledge of configuration management, operating systems and system security testing and evaluation methods.
Knowledge of network security architecture, networking concepts and protocols and how traffic flows across networks.
Knowledge of cybersecurity risk management processes, laws, policies and governance relevant to cybersecurity and privacy.
Knowledge of cybersecurity threats, vulnerabilities, cryptography concepts, identity and access management principles and security practices protecting sensitive or regulated information.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or cyber-related field. Relevant certifications and/or additional years of relevant work experience may be accepted in lieu of degree.
4+ years of experience in cybersecurity, information security or a related field.
Hands on experience with Imperva on-prem PROD and Imperva Azure PROD.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Nice To Haves

Industry recognized certifications.

Responsibilities

Analyze and report organizational and system security posture trends, including monitoring activities related to database security risks.
Apply security policies and cybersecurity principles to ensure systems meet defined security objectives and requirements.
Assess access control implementations to ensure alignment with least privilege and need-to-know principles.
Evaluate configuration management, change management and release management processes for security compliance.
Assess and monitor cybersecurity practices associated with system implementation, testing and operational activities.
Assess the effectiveness of implemented security controls, including controls protecting databases and data stores, and identify areas requiring improvement.
Ensure systems security operations and maintenance activities are properly documented and kept current.
Implement security measures to resolve vulnerabilities, mitigate risks and support system confidentiality, integrity, availability, authentication and non-repudiation.
Support security testing of applications and systems, including identifying security deficiencies and supporting remediation or risk acceptance processes.
Conduct security architecture reviews, identify gaps and contribute to the development of security risk management plans.
Support Risk Management Framework (RMF) activities and related documentation, including lifecycle support plans, operational procedures and system documentation updates.
Collaborate with stakeholders to resolve security incidents, address vulnerabilities and ensure minimum security requirements are implemented across applications.