Information Systems Security Analyst

Provide cybersecurity expertise supporting enterprise environments, including risk management, incident response, threat/vulnerability mitigation, and security architecture considerations.

• Assess/mitigate cybersecurity threats and vulnerabilities; apply risk management processes.
• Support encryption, access controls, intrusion detection, traffic analysis, and incident response/handling.
• Apply secure system/software lifecycle concepts and security architecture/enterprise reference models.
• Support continuity planning (backup/recovery, disaster recovery, COOP).
• Apply program/project management principles in support of information security program needs.

• Experience:
  
  4+ years in Cybersecurity.
• Skills (examples explicitly called out):
  • Encryption algorithms: IPSEC, AES, GRE, IKE, MD5, SHA, 3
    
    DES.
  • Incident response/handling; intrusion detection; penetration testing; emerging threats.
  • Network protocols and models (TCP/IP, OSI), traffic analysis, access control mechanisms (e.g., ACLs).
  • System/application threat knowledge (e.g., buffer overflow, XSS, SQL injection).
  • Cloud service/deployment models (SaaS/IaaS/PaaS) and cloud security strategy/architecture.
  • Data security standards including PII/PCI/PHI.

• Office tools:
  Ability to document, track, and report cyber work products
• Scheduling/Tracking systems:
  Experience supporting enterprise incident response programs/roles and performing analysis/reporting
• Security/Information handling:
  Knowledge of cybersecurity laws/regulations/policies/ethics; risk management; secure acquisition/supply chain risk concepts.

We are an Equal Opportunity Employer and strive to provide equal employment opportunity to all applicants and staff in accordance with sound employee relations practices and federal and state laws. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, marital status, ancestry, genetic information, pregnancy status or any other characteristic protected by law.

Information Security Analyst
• Norfolk, VA, US