Request ID:BL-9017-1 (99091017)
Security Analyst with risk/vulnerability assessment, intrusion detection, firewall, Nessus, Forescout, data classification/management tools, incident management and POAM experience
Location:Columbia SC
Duration:12 Months Hrs/Wk:37.50
DAILY DUTIES / RESPONSIBILITIES:
1. CONFIGURE, OPTIMIZE, AND MAINTAIN CURRENT SECURITY TOOLS TO INCLUDE NETWORK AND SERVER MONITORS AS WELL AS VULNERABILITY SCANNERS AND INTRUSION DETECTION.
2. REVIEW FIREWALL REPORTS AND CREATE REPORTS OF ATTACK METHODS AND THEIR RISK TO THE AGENCY.
3. REWORK OUR VULNERABILITY SCANNING TOOLS TO BETTER ALLOW US TO IDENTIFY RISK.
4. RESEARCH CURRENT SECURITY INITIATIVES AND MAKE RECOMMENDATIONS TO MANAGEMENT
Required Skills (rank in order of Importance):
• Nessus vulnerability scanner
• Configuration and maintenance
• Forescout automation
• Assistance with windows updates and patches as required
• Vulnerability analysis and remediation methods
• Data classification and management tools
• Incident handling experience
• Security policy and procedures
PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
POAM EXPERIENCE
SECURITY PROCEDURE DOCUMENTATION
REQUIRED EDUCATION:
PREFER BACHELOR’S DEGREE IN INFORMATION TECHNOLOGY RELATED DISCIPLINE WITH 3 YEARS OF EXPERIENCE OR MINIMUM 5 YEARS RELATED EXPERIENCE.
REQUIRED CERTIFICATIONS:
NOT REQUIRED BUT SECURITY CERTIFICATIONS WILL BE FACTORED IN THE SELECTION PROCESS
Experience
IT AdministrationPatch ManagementYes1
MiscellaneousConfiguration managementYes1
Network Securityinformation security principles and practicesYes1AdvancedCurrently Using4 – 6 Years
Network Securityrisk/vulnerability assessmentsYes3IntermediateCurrently Using4 – 6 Years
Network SecurityTenable Security Center AdministrationYes1AdvancedCurrently Using4 – 6 Years
Networking & DirectoriesINCIDENT MANAGEMENTYes2AdvancedCurrently Using4 – 6 Years
SpecialtiesExperience in developing and maintaining documentation for policies, procedures, and best practicesYes4IntermediateCurrently Using4 – 6 Years
SpecialtiesExperience with security and data classification related to CDC, HIPAA, and CJISYes2AdvancedCurrently Using4 – 6 Years
SpecialtiesVulnerability ScanningYes1
Remote Work Availability:0%