Information Systems Security Analyst

Job Type

Full-time

Description

Client Solution Architects (CSA) is currently seeking an Information Systems Security Analyst to support a program at Dahlgren, VA.

This role is contingent on award.

For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions.

Cybersecurity Expertise

How Role will make an impact:

• Cybersecurity principles, threats, vulnerabilities, and risk management processes
• Encryption algorithms (e.g., Internet Protocol Security (IPSEC), Advanced Encryption Standard (AES), General Routing Encapsulation (GRE), Internet Key Exchange (IKE), Message Digest 5 (MD5), Secure Hash Algorithm (SHA), Triple Data Encryption Algorithm (3DES)
• Data backup and recovery concepts and tools
• Disaster recovery and continuity of operations planning
• Host/network access control mechanisms (e.g., Access Control Lists (ACLs)
• Incident response and handling methodologies
• Intrusion detection methodologies and techniques
• Network traffic analysis methods
• Network protocols (Transmission Control Protocol /Internet Protocol (TCP/IP), and Open System Interconnection (OSI) model
• System and application security threats and vulnerabilities (e.g., buffer overflow, cross-site scripting, SQL injection)
• Security architecture concepts and enterprise architecture reference models
• National and international cybersecurity laws, regulations, policies, and ethics
• Current and emerging threats and threat vectors
• Enterprise incident response program, roles, and responsibilities
• Penetration testing principles, tools, and techniques
  
  

Technical Proficiency

• Computer networking concepts, protocols, and security methodologies
• System performance and availability monitoring
• System software and organizational design standards (e.g., International Organization of Standardization (ISO) guidelines)
• System life cycle management principles, including software security and usability
• System/server administration and systems engineering concepts and methods
• Server and client operating systems
• Network security architecture concepts (topology, protocols, defense-indepth)
• Network systems management principles and tools
• Basic system administration, network, and operating system hardening techniques
• Cloud computing service and deployment models (SaaS, IaaS, PaaS)
• Cloud security strategy and architecture
• Data security standards Personally Identifiable Information (PII), Payment Card Information (PCI), Protected Health Information (PHI))
  
  

Leadership And Management

• Information security program management and project management principles
• Resource management principles and techniques
• Risk management processes (assessment and mitigation)
• Secure acquisitions (e.g., Contracting duties, secure procurement, supply chain risk management)
• Information technology (IT) supply chain security and risk management
• Applicable laws, statutes, Presidential Directives, and guidelines related to cybersecurity and privacy
• Organizational risk tolerance and risk management approach
• Critical IT procurement requirements
  
  

Requirements

What you’ll need to have to join our award-winning team:

• Clearance: Must possess and maintain an active Secret Clearance
• Four (4) years of experience in Cybersecurity.
• Certification: IAT Level II