Senior Information Security Analyst

Job#: 2044162

Job Description:

• Support the ISSM to define, create, and maintain the documentation for certification and authorization of the ADCS system in accordance with requirements. They also assess the impacts on system modifications and technological advances. 
• Manages system vulnerabilities in accordance with security requirements utilizing NIST continuous monitoring standards, RMF critical security controls and counter measures based on risk assessments of mission systems.
• Identify and assess specific emergency or priority vulnerabilities, guided by input from other elements of the team such as cyber intelligence, engineering, or operations and suggest specific remediation approaches.
• Analyze vulnerability data and assist with the prioritization and remediation of the identified vulnerabilities commensurate to risk and vulnerability management standards
• Understand vulnerabilities, their impacts, mitigation techniques, and document and articulate this understanding to various stakeholders
• Update and develop security standards and templates as required to meet new regulatory/audit/etc. requirements and guidance
• Improve the efficacy and efficiency of specific VM practices across the enterprise, to include vulnerability identification/assessment/remediation.
• Leverage and enhance existing VM frameworks/policies/standards to ensure VM maintains a minimum of industry best practices.
• Coordinate collection of data and documentation in support of examinations/audits
• Work with existing solution vendors (e.g., ACAS, HBSS) as necessary; identify potential solutions.
• Research, develop, implement, test and review information security in order to protect information and prevent unauthorized access.
• Responsible for gathering information necessary to maintain security and establish functioning external barriers such as firewalls and other security measures.
• Additionally, ISSOs assess and review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades.

• BA/BS and 3+ years of experience (additional years of experience will be considered in lieu of degree, 7+)
• Experience and training with Microsoft Server 2016/ 2019 or newer to include Active Directory, Radius, DNS and Group Policy
• Experience and training with virtual environments (VMware, Hyper-V, etc.)
• Familiar with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans
• Familiar with maintaining and operating SQL server
• Experienced in applying patches/updates and STIGs
• Possess and maintain a minimum of IAT level II certification IAW the DoD directive 8140.01Cyberspace Workforce Management.
• Security Clearance Level: Secret
• Location: On Customer Site
• US Citizenship Required

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.