Security Analyst

What you'll do:

The position requires the individual to analyze the components of the CMS and corporate security requirements to ensure the SGS approach supports all appropriate policies and procedures are in place and deliverables met timely.

SGS CDM Security Analysts are responsible for identifying information security issues that may pose an immediate risk to SGSs business operations, customers, employees, suppliers, partners, or shareholders and alert them on real-time
Their job description entails managing SGSs IT security and risk, as well as analyzing and identifying security solutions by using the tools and processes outlined in the CDM proposal.
The role also involves interacting directly with other functions on issues concerning security, to verify and validate results of Tenable vulnerability scans or GigaMon network traffic aggregation.
The Security Analyst works under the supervision of the CISO and has the responsibility over a comprehensive data security program for the organization’s system, which entails providing development of CDM specific policies, procedures and guidelines, training of other CDM staff, execution of processes, procedures or assessments related to CDM, and monitoring of the security tools deployed as a part of the CDM initiative.
The Analyst carries out appropriate checks and reviews and recommends authorization to requests, as well as performs auditing functions on access rights periodically in line with the required HIPAA policies
The Security Analyst also carries out vulnerability testing and scans of the FISMA mapped assets within the SGSNet accreditation boundary using the CDM tools, as well as overseeing and assisting with configuration updates to the CDM tools.
The Analyst operates software tools needed such as Tenable, ForeScout CounterAct, and Gigamon to effectively observe and analyze network vulnerabilities, as well as configures and carry out necessary testing on dedicated application vulnerabilities.
The Security Analyst work description also involves setting up of scans to effectively detect malicious software and hardware that might be present on the network in line with the CDM HWAM and Configuration management requirements.
It also includes carrying out security reviews and/or audits of existing and newly acquired systems; making recommendations on improvements to internal controls and security; and carrying out information security risk assessments annually
The Security Analyst also has the obligation to ensure breaches and anomalies identified by the CDM tool set are effectively handled by facilitating defined response procedures.
The Analyst is also responsible for completing statistical and status reports, as well as providing fast, timely and accurate responses
The duties also involve finding ways to improve security within the FISMA accreditation boundary, by suggesting configuration changes to server, network, client, and/or security devices
The Security Analyst is also responsible for carrying out appropriate investigations to discover root causes and assist in determining appropriate mitigation.
Interact with customers regarding business and technical information technology needs.
Participate in implementations, upgrades, and conversion projects.
Manage projects within scope of responsibilities.
Telework is available, and candidates must be able to work East Coast business hours.

Qualifications

Basic Qualifications:

0 years with BS/BA; 4 years no degree
Strong computer skills including Microsoft Access, experience in relational database design, extract, and reporting, Excel, and the Internet
Proven Ability to work with a variety of systems, sources of data and detection, monitoring and analytic tools
Excellent organizational and communication skills
Excellent analytical and problem-solving skills
Excellent communication skills
Ability to work flexible hours
US. citizenship required

Desired/Preferred Qualifications:

Degree preferably in computer science or management information systems
Experience working with the Tenable software tool
Knowledge and support of IT Networks
Ability to serve as the liaison for any Security Related Audits, including FISMA and ACT
Ability to facilitate and coordinate security related communication to SGS staff
Ability to provide support/direction for security related questions from SGS employees
Ability to maintain security related reports and internal control evaluation
Ability to monitor and review audit logs SITS
Ability to maintain and prepare Security Deliverables for CMS
Ability to analyze security data to identify and compare norms, trends and patterns.
Ability to present issues of concern, citing regulatory, policy or contractual violations.