Job Summary:
Planning and implementing security measures to protect computer systems, networks and data. Information security analysts are expected to stay up-to-date on the latest intelligence, including hackers
methodologies, in order to anticipate security breaches. They also are responsible for preventing data loss and service interruptions by researching new technologies that will effectively protect a network.
Primary Responsibilities:
Train users and promote security awareness to ensure system security and to improve server and network efficiency. Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs. Confer with users to discuss issues such as computer data access needs, security violations, and programming changes. Monitor current reports of computer viruses to determine when to update virus protection systems.
Modify computer security files to incorporate new software, correct errors, or change individual access status.
Coordinate implementation of computer system plan with establishment personnel and outside vendors.
Monitor use of data files and regulate access to safeguard information in computer files.
Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
Document computer security and emergency measures policies, procedures, and tests.
Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
Maintain permanent fleet cryptologic and carry-on direct support systems required in special land, sea surface and subsurface operations.
Qualifications:
Experience in information security or related field. Experience with computer network penetration testing and techniques.
Understanding of firewalls, proxies, Security Information and Event Management (SIEM), antivirus, and Intrusion Detection and Prevention Systems (IDPS) concepts.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.