Systems Analyst

ASSYST is seeking a Security Analyst who will be responsible for coordinating and executing security policies and controls within the company, assessing vulnerabilities, and ensuring the security of both on-prem and cloud environments. The analyst will manage security systems, investigate security violations, and review security architecture on a daily basis. This role requires a comprehensive understanding of regulatory requirements, industry standards, and trends, with a focus on AWS Cloud Security. The position also involves managing projects, coordinating security-related calls, and implementing security measures to safeguard computer systems, networks, and data.

Key Responsibilities:

• Coordinates and executes security policies and controls, and assesses vulnerabilities within the company.
• Experience with data and network security processing, security systems management, and security violation investigation.
• Performs daily analysis of on-prem and cloud security and monitors security operations, including security architecture reviews.
• Understands regulatory requirements, with in-depth knowledge of industry standards and trends, and is proficient with the latest cybersecurity software.
• In-depth knowledge of AWS Cloud Security.
• Manages various projects and oversees all aspects of project planning and execution.
• Identifies problems/issues, analyzes and evaluates alternatives, and recommends/implements effective solutions.
• Orchestrates calls, including but not limited to project kick-off calls, notifications of high/critical findings during the testing process, and close-out calls to review test findings, evidence, process steps to reproduce, and remediation recommendations.
• Implements security measures to protect computer systems, networks, and data, and stays up to date on the latest intelligence, including hacker methodologies, to anticipate breaches.
• Extensive experience working with and implementing NIST 800-37, NIST 800-53, MARS-E controls, POA&Ms, and developing Corrective Action Plans.
• Reviews violations of computer security procedures and collaborates with the HHSC/TIERS Security team.
• Confers with users to discuss issues such as computer data access needs, security violations, and programming changes.
• In-depth knowledge and hands-on experience with the AWS platform.
• Experience with security web application firewalls.
• Manages conflict and resolves issues at managerial levels.
• Reviews and coordinates audit responses, evidence gathering, and plans of action. Collaborates with IT departments to coordinate audit responses.
• Develops and implements IT policies, standards, and procedures.
• Experience in delivering technical training in cloud-based technology is a plus.
• Provides Windows and Linux operating system and application support.
• Conducts information security risk assessments.
• Reviews security governance documentation and security plan documents.
• Experience with ITIL - ticketing using Remedy and ServiceNow.
• Trains staff on network and information security procedures, processes, and information safeguarding.
• Experience working with Archer GRC, Dynatrace, Splunk, Imperva Web Application Firewall, Qualys, and MS Office tools.

Qualifications:

• Extensive experience in information security and cloud security, particularly with AWS.
• Proven experience in managing security projects, security audits, and vulnerability assessments.
• Strong understanding of security governance, NIST standards, and regulatory requirements.
• Proficiency with security technologies such as web application firewalls, Splunk, and Imperva.
• Excellent problem-solving skills and the ability to recommend and implement effective security solutions.
• Strong communication skills, with experience in conflict management and managing security-related calls.