Apply on Employer Site

VARITE INC · 1 day ago

Information Security Analyst

City of Industry, CA

Contract

Onsite

Senior Level

$50/hr - $55/hr

5+ years exp

VARITE INC is an award-winning minority business enterprise providing global consulting & staffing services to Fortune 1000 companies and government agencies. They are seeking an Information Security Analyst to interpret and implement information security policies, redesign internal processes, and provide expertise in security disciplines.

Information Technology & Services

Growth Opportunities

Responsibilities

Interprets information security policies, standards and other requirements as they relate to internal information system and coordinates the implementation of these and other information security requirements

Redesigns and reengineers internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability

Provides highly specialized experience in one or more information, computer, or network security disciplines (e.g. penetration testing, accreditation, or risk assessment and mitigation)

Develops system security plans, certification and accreditation reviews

Analyzes and establishes processes for comprehensive systems and data protection

Assesses and mitigates system security threats and risks

Performs security audits, evaluation, risk assessments and makes strategic recommendations

Manages, supports, installs and maintains security tools and systems, and tracks security patches and incidents

Qualification

NIST 800-53Vulnerability analysisPenetration testingRisk assessmentSecurity certifications

Required

Minimum of five (5) years of experience applying security policies, standards, testing, modification and implementation

At least three (3) years of that experience must be in information security analysis

3 years in the last 5 years of experience in the following: NIST 800-53; conducting vulnerability analysis; and performing gap analysis and developing mitigation processes for identified risks

Hands-on knowledge in standard methodologies used in certification and accreditation processes

Ability to follow and review NIST guidelines in risk assessment and management

Knowledge and experience in standard methodologies used in certification and accreditation processes

Extensive experience following NIST guidelines in risk assessment and management

Conducting vulnerability analysis

Developing mitigation plans

Performing penetration testing, password protection testing and application security testing

Possession of a bachelor's degree in an IT-related or Engineering field

One or more of the following Security Certifications: Security +, Certified Ethical Hacker, Cloud Security Professional, CISSP