Apply on Employer Site

Yakshna Solutions · 1 month ago

Information Systems Security Analyst (ISSA)

Herndon, VA

Full-time

Onsite

Mid, Senior Level

$75K/yr - $100K/yr

4+ years exp

Yakshna Solutions, Inc. is a woman-owned small business that provides IT solutions and services to corporations and government organizations. They are seeking an Information Systems Security Analyst to conduct cybersecurity risk assessments, implement security controls, and lead incident response operations while ensuring compliance with relevant laws and regulations.

ConsultingGovernmentInformation ServicesInformation Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Responsible for effective provisioning, installation/configuration, operation, and maintenance of computer hardware and software and related infrastructure

This individual ensures that system hardware, operating systems, software systems, and related procedures adhere to Commonwealth policies, standards, and guidelines

Responsibilities include systems administration, engineering and provisioning, operations and support, maintenance and research and development to ensure continual innovation

Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements

Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups

Perform regular security monitoring to identify any possible intrusions. Perform daily backup operations and regular file archival and purge as necessary. Create, change, and delete user accounts per request

Provide Tier III/other support per request from various constituencies. Investigate and troubleshooting issues

Diagnose and recover from hardware or software failures

Coordinate and communicate with impacted constituencies

Apply OS patches and upgrades on a regular basis and upgrade administrative tools and utilities. Configure / add new services as necessary

Upgrade and configure system software that supports GIS infrastructure applications or Asset Management applications for project or operational needs

Maintain operational, configuration, or other procedures

Perform periodic performance reporting to support capacity planning

Perform ongoing performance tuning, hardware upgrades, and resource optimization as required

Conduct cybersecurity risk assessments to identify threats, vulnerabilities, and potential impacts, and recommend mitigation strategies aligned with organizational risk tolerance

Implement and manage security controls, including encryption, access control mechanisms, system hardening, and network defense-in-depth measures across servers, applications, and cloud environments

Monitor network and system activity using intrusion detection tools, traffic analysis methods, and performance monitoring systems to identify and respond to anomalous or malicious behavior

Lead incident response operations, including detection, triage, containment, eradication, and recovery, while coordinating roles and responsibilities across the enterprise incident response team

Develop and maintain cybersecurity policies, procedures, and disaster recovery/continuity of operations plans, ensuring alignment with national and international laws, regulations, and standards (e.g., ISO)

Manage and support penetration testing activities, including planning, execution oversight, and results analysis to enhance security posture and address identified weaknesses

Oversee cybersecurity program management functions, including secure procurement, supply chain risk management, resource allocation, and compliance with IT acquisition requirements

Provide technical guidance and leadership on network architecture, cloud security strategies, secure system lifecycle management, and organizational design standards to ensure alignment with enterprise architecture

Qualification

CybersecurityIncident responseNetwork securityRisk assessmentPenetration testingTechnical proficiencyManagement skillsCustomer serviceHelp desk supportLeadership skills