The Junior Security Analyst will oversee, evaluate, and support the documentation, validation, and accreditation processes necessary to assure that IT systems meet the organization's security requirements:
• Respond to crisis or urgent situations within the system to mitigate immediate and potential threats
• Use mitigation, preparedness, and response and recovery approaches, as needed, to maximize information security
• Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives
• Provide security advice and recommendations to leadership and staff based on NIST and FIPS guidelines
• Analyze system security assessment reports
• Develop estimates of the security risks associated with deployment of new technologies
• Use defensive measures and information collected from a variety of sources to identify, analyze, and report events
Compensation is anywhere from 40k to 60k salaried based on experience.
Required Skills and Qualifications
• Must be a US Citizen
• CompTIA Security + certification
• A bachelor's degree in information technology systems, computer science, or a related field and experience in information technology systems or a related area
• At least 3 years of information security experience, including documenting system security controls in place to support the Assessment and Authorization processes.
• 1-2 years of professional experience supporting information security/assurance programs, policies, processes, and operational procedures per various standard security frameworks/laws/standards/directives, e.g.: FISMA; OMB directives; Presidential Directives; NIST (SP-800 series; FIPS); HIPAA of 1996; Privacy Act; FedRAMP
• Experience using Nessus, AIDE, Windows, Linux/RHEL
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Hands on experience analyzing requirements and writing to security control implementation language
• Experience in with identifying and collecting required security control artifacts
• Comprehensive knowledge of the FISMA, HIPAA laws and Privacy Act of 1974
• Experience writing System Security Plans using-depth knowledge of the NIST 800-53 security control requirements and standard methods for implementing security controls
• Understanding of risk assessment and risk management concepts, including POA&M support
• Practical knowledge of IT System contingency planning and incident response
• Good understanding of continuous monitoring and continuous authorization concepts
• Good understanding of protection of PII and PIA concepts
• Expert use of MS Office, especially Word, PowerPoint, and Outlook
• Good ability to articulate technical concepts, especially in the audit review process
C2 Essentials is an Equal Opportunity Employer.
...looking for an experienced contract and administrative specialist with strong attention to detail to support complex agreement management for a long-term contract position based in... ...administration effectiveness and overall service quality. Maintain organized historical contract...
...to have fun we are the company for you!BenefitsCompetitive salary, free food & snacks, free uniformsKey ResponsibilitiesPrep and install the flooring in steps according to company's procedures with high attention to detail and careKeep tools organized and clean and maintain...
...light paperwork throughout the day is necessary. Organizational skills are a must. Our drivers are assigned comfortable company pickup trucks with small utility trailers. Drivers will start their mornings doing a safety check on truck and trailer. We do offer flex time...
...change. Position Summary The SUD Counselor provides direct clinical and recovery-... ...seeking treatment for substance use disorders. This position is responsible for conducting... ...support during client emergencies or behavioral health concerns. Maintain timely,...
...Blockchain Developer Jersey City, NJ Design network architecture and overall system rules Build consensus protocols to validate data safely Set up security patterns and protect nodes from threats Supervise and maintain the health of the live network...