Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate CMS and corporate security requirements to ensure that policies, procedures, and deliverables are established and executed in a timely manner.

• Detect information security threats that present immediate risks and deliver real-time alerts.

• Oversee IT security and risk management while assessing security solutions utilizing CDM tools and methodologies.

• Validate Tenable vulnerability scans and Gigamon network traffic aggregation.

• Create CDM-specific policies, procedures, guidelines, and training for staff.

• Implement CDM processes, procedures, and assessments while monitoring the effectiveness of deployed security tools.

• Review and recommend authorization for access requests, conducting audits of access rights in compliance with HIPAA regulations.

• Perform vulnerability testing and scans on FISMA-mapped assets within the SGSNet accreditation boundary.

• Supervise and assist with configuration updates for CDM tools.

• Utilize Tenable, ForeScout CounterAct, and Gigamon to monitor and evaluate network vulnerabilities.

• Configure and test for application vulnerabilities.

• Establish scans to identify malicious software and hardware in alignment with CDM HWAM and configuration management requirements.

• Conduct security reviews and audits for both existing and newly acquired systems.

• Propose enhancements to internal controls and security measures.

• Carry out annual information security risk assessments.

• Facilitate response protocols for breaches and anomalies detected by CDM tools.

• Generate statistical and status reports, providing timely and accurate feedback.

• Recommend configuration modifications for servers, networks, clients, and security devices.

• Investigate root causes and assist in formulating mitigation strategies.

• Engage with customers regarding their business and technical IT requirements.

• Participate in implementation, upgrade, and conversion projects.

• Manage projects within the scope of responsibilities.

⛳️ Requirements

• 0 years of experience with a BS/BA; 4 years of experience without a degree.

• Strong proficiency in computer skills, including Microsoft Access, relational database design, data extraction and reporting, Excel, and internet tools.

• Capability to work with diverse systems, data sources, detection, monitoring, and analytical tools.

• Outstanding organizational and communication abilities.

• Strong analytical and problem-solving skills.

• Flexibility to work varying hours.

• Must be a U.S. citizen.

• Degree in computer science or management information systems is preferred.

• Prior experience with Tenable is preferred.

• Knowledge of and support for IT networks.

• Ability to act as a liaison for security-related audits, including FISMA and ACT.

• Ability to coordinate security-related communications with SGS staff.

• Capacity to support and guide security-related inquiries from SGS employees.

• Ability to maintain security-related reports and internal control assessments.

• Ability to monitor and review audit logs.

• Ability to prepare and maintain security deliverables for CMS.

• Ability to analyze security data to identify and compare trends, norms, and patterns.

• Ability to articulate concerns citing regulatory, policy, or contractual violations.

🏝️ Benefits

• Telework options are available.

• Employees may qualify for overtime compensation.

• Employees may be eligible for shift differentials.

• Employees may receive a discretionary bonus.

• Equal opportunity employer, including for individuals with disabilities and protected veterans.