Security Analyst

• Assists in the development and implementation of security policies and standards for IT related items procured by the agency (e.g., hardware and software);

• Researches and reviews various national and international security standards (e.g., Internal Revenue Service, Federal Information Processing (FIPS), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO)) and explains the results, both orally and in writing;

• Attends meetings with the Contract Attorney, General Counsel, Chief Information Officer, Chief Information Security Officer, and Deputy Director in order to determine agency policy as it relates to Information Security.

REQUIRED SKILLS:

• Oral and written communication skills;
• Experience in developing and maintaining documentation for security policies, procedures, and best practices;
• Providing continual consultation and written reports to senior management concerning security issues;
• Hands-on experience documenting and managing all aspects of security within an enterprise organization, including but not limited to:

o Firewall and IDS/IPS experience;

o Virtual Private Networking (VPN);

o Network access policies;

o Web filters;

o Publically accessible assets;

o Active directory;

o Security compliance for third party and/or in-house developed applications;

o Virtualization and Storage area networking security; and

o Anti-Virus management;

• Experience preparing and submitting Security Program evaluations and compliance reports;
• Working with other Department leaders, designing security components for operations and other strategic processes, and supervising the development and implementation of required security reporting devices and processes at all levels.

Extensive working knowledge of Internet protocols, tools, and techniques including but not limited to:

o Virtual Private Networking (VPN);

o TCP/IP, Local Area Networks (LAN), Wide Area Networks (WAN);

o Network device operating systems security configuration;

o Internet security; and

o Internet Information Server;

• Knowledge of Virtual Machine operation, strengths, and weaknesses;
• Experience with VMWare ESX security;
• Support of web-based applications for internal (intranet) sites and external (Internet) sites;
• Experience and working knowledge of backup products and methodologies..

• At least 10 years experience working as the Chief Information Security Officer, Security Officer, Security Consultant, or Security Analyst for a state or federal agency or large corporation.

• Minimum 6 + Years experience in Application Security and Security
• Knowledge in networking, databases, systems and Web operations.

• 6 + Years experience in Security Information Architecture and Windows Security
• Group Policy, Network access policies, User access policies.

• 2 - 4 Years experience in Anti-Virus management and VPN - virtual private network.

• And 6 + Years experience in Software Development Lifecycle
• SDLC.

• 2 - 4 Years experience in Firewall and Web Filters.

• 6 + Years experience in Experience in developing and maintaining documentation for policies, procedures, and best practices, NIST Security.

Please help pass along to colleagues or associates below position who are looking for new role if you are not available.

Should someone need more information I can be reached at narendraAT mitresourceDOTcom

Thank you for your time.