What are the responsibilities and job description for the ATSG IS SECURITY ANALYST position at Air Transport Services Group, Inc.?
Information Security Analyst
What you will do:
The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.
What you need:
What you will do:
The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.
What you need:
- Bachelor’s degree in computer science, technology, or equivalent experience
- Knowledge or networks; TCP/IP, DNS, Firewalls, Windows and Linux Servers, VMWare, Nutanix, Active Directory, MFA and Encryption
- Excellent planning and organizational skills
- Strong written and verbal communication skills
- Ability to work independently and as part of a team
- Certification such as Security , CISSP, CEH are a plus
- Experience with NIST, CMMC and Sox requirements are a plus
- Experience with anti-virus, threat analysis and security testing tools are a plus
- Ability to contribute to DR planning a plus