We have a challenging and new opportunity for a Cyber Security Analyst Consultant in NYC! This position is HYBRID! 

Under the guidance of the IT Architect or Systems Manager, the Consultant will be responsible for evaluating and implementing new technologies, analyzing infrastructure and software designs and implementations, and identifying and resolving potential issues to help enhance and secure a large enterprise network. The position requires a broad foundation of IT architectural experience with an understanding of current PaaS and SaaS technologies. 

Other responsibilities are:

• Will be responsible for designing complex and innovative solutions addressing vulnerability detection, threat, and risk analysis, network intrusion, securing technology assets across the application, infrastructure, cloud, and data tiers, and development/implementation of vulnerability mitigation strategy
• This is a hands-on team member who actively works with various teams, including security, infrastructure, and development teams, to improve our overall security standards
• This position is expected to be the last level of technical escalation within the company for the assigned responsibilities
• Guides Cyber Governance and Information Protection team and makes informed security decisions on the design of infrastructure, systems, and applications
• Works with tech leads and teams to ensure security is built into app development, network infrastructure, and cloud systems
• Work with necessary Information Technology groups to satisfy specific technology-related issues
• Act as an Information Security liaison between the customers and all groups in Information Technology
• Implements industry-leading practices around cyber risks and Cloud Security and performs security assessments of cloud platforms/environments using industry standards frameworks such as ISO, CSA-CSM, and NIST
• Designs and develops security policies, standards, and procedures, e.g., firewall management, SSL/IPSec, security incident and event management (SIEM), data protection (DLP, encryption), user account management (SSO, SAML), and password/key, password management
• Identifies software weaknesses that could lead to exploitable vulnerabilities such as SQL injection, cross-site scripting, cross-site request forgery, buffer overflows, use of hard-coded passwords, weak encryption, sensitive data
• Constantly looking for better ways of solving security problems and designing the solution, not afraid of challenging the status quo
• Support various systems and become SME for the team
• Respond swiftly to all alerts, performing initial risk/impact assessments or escalating issues as appropriate
• Follow change management controls and guidelines
• Support operating organizations during corporate emergencies
• Participate in the Client's emergency management processes, cyber security, and storm plans
• Perform other related tasks and assignments as required

This is an hourly position with opportunity for overtime.

 **All Candidates Must be Authorized to Legally Work in the US Without Sponsorship**

Mandatory Qualifications: (Please read carefully. They MUST be shown on your resume)

• Familiarity with Internet-facing technologies, server/storage technologies, cloud services, and hybrid cloud integration is a MUST
• Adequate knowledge of web-related technologies (web applications, Web Services, and Service Oriented Architectures) and network/web-related protocols
• Experience designing the secure deployment and monitoring of applications and infrastructure in public cloud services (e.g., AWS or Microsoft Azure)
• Must be comfortable and skilled at driving information security processes and techniques 
• Must be able to communicate designs and give persuasive presentations
• Must be able to interact with all levels of management and communicate technical concepts to a non-technical audienceAbility to handle multiple assignments with changing priorities while meeting deadlines
• Must be flexible and able to work off-hours as required to support deployments, resolve production problems, or respond to corporate emergencies
• Ability to establish medium and long-term plans and priorities and estimate investment requirements
• 3-5 years of a strong understanding of Cyber Security principles
• 3-5 years of experience designing, developing, and implementing secure architectures and/or processes
• Experience with implementing or integrating commercially available infrastructure components
• Experience in evaluating technology and establishing standard designs
• Must be conversant in emerging technologies and practices such as cloud computing
• Familiarity with OT/ICS vulnerability products, processes, and industry best practices
• Familiarity with OT assets, architecture, and implementing solutions to satisfy OT guidelines and security controls

The following are not required for this position but would be considered as a valuable asset in a potential candidate:

•  Knowledge of OT/ICS protocols
• Technical certifications (e.g., AWS Certified Solutions Architect, Cloud Certified Professional, Microsoft Cloud Certifications, CISSP, CISM, CIPP, GCIP, etc.) are preferred but not mandatory 
• Experience in Agile Development with specific Security Architect (or similar) experience preferred
• Knowledge of security tools is preferred

$500 Referral Fee Program

Earn extra cash while helping your friends!

VTS3 will pay you up to $500.00 for each person you refer to us and we place into a contract or full-time position. If you know someone who's a good candidate for any of our openings, use the "Refer a friend" button on this page and earn extra cash.

The rules are simple:

• The referral must be made by using the "Refer a friend" button on this page
• The person you refer must be placed within 90 days of being referred
• The person you refer must complete 480 billable hours
• Cannot be someone we already have on our team or are currently working with