What are the responsibilities and job description for the Information Technology Security Analyst position at Pyramid Technology Solutions?
Job Role: IT Security Analyst
Location: City of Industry, CA (91746)
Duration: 10 Months Contract
Work Schedule: 4/10 – M-T
Position Description:
An Information Security Specialist interprets information security policies, standards and other requirements as they relate to internal information system and coordinates the implementation of these and other information security requirements. The Information Security Specialist redesigns and reengineers internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability. The Information Security Specialist will provide highly specialized experience in one or more information, computer, or network security disciplines (e.g. penetration testing, accreditation, or risk assessment and mitigation); develop system security plans, certification and accreditation reviews; analyze and establish processes for comprehensive systems and data protection; assess and mitigate system security threats and risks; perform security audits, evaluation, risk assessments and make a strategic recommendations; and manages, supports, installs and maintains security tools and systems, and tracks security patches and incidents.
Skills Required:
The Information Security Specialist will possess knowledge and experience in standard methodologies used in certification and accreditation processes; extensive experience following NIST guidelines in risk assessment and management; conducting vulnerability analysis; developing mitigation plans; and performing penetration testing, password protection testing and application security testing.
Skills Preferred:
Hands-on knowledge in standard methodologies used in certification and accreditation processes; and ability to follow and review NIST guidelines in risk assessment and management.
Experience Required:
This classification must have a minimum of five (5) years of experience applying security policies, standards, testing, modification and implementation. At least three (3) years of that experience must be in information security analysis.
Experience Preferred:
3 years in the last 5 years of experience in the following: NIST 800-53; conducting vulnerability analysis; and performing gap analysis and developing mitigation processes for identified risks.
Education Required:
This classification requires the possession of a bachelor’s degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis.
Education Preferred:
At a minimum one or more of the following Security Certifications: Security , Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP)
