What are the responsibilities and job description for the Information Assurance Analyst position at TEKsystems c/o Allegis Group?
Job Details
Aloha! One of Hawaii's largest telecom clients is seeking an Information Assurance analyst.
Primary Job Function
Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, policies, or guidance. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.
Assists with risk assessments, and development of security architecture solutions and technologies.
Supports development of detailed proposals and plans for new information security systems and controls to enhance or enable new capabilities for network or hosted applications.
Conducts ongoing compliance reviews; assists in developing practices to ensure adequate information security and IT controls.
Additional Functions
Performs information security risk assessments and recommends mitigating controls and solutions for IT and Operations Technology (OT) projects and applications, including proposals for externally hosted applications and new utility technology projects.
Assists with the system assessments for conformance with configuration control, policy, and guidance.
Assists with program development and management for privacy, e-discovery, security awareness training, digital forensics, vulnerability remediation, and other security and compliance programs.
Performs miscellaneous administrative roles such as schedule development, information tracking, updating deliverables and other work assigned.
Supports the Company's business continuity planning, IT disaster recovery planning, cybersecurity incident response planning and team (CS-IMT), with occasional on-call support.
Participates in Company emergency response activities as assigned, including any activities required to prepare for such emergency response.
Preferred Knowledge Requirements
Computer networking concepts and protocols, and network security methodologies.
Risk management processes (e.g., methods for assessing and mitigating risk).
Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
Cyber threats and vulnerabilities.
Cryptography and cryptographic key management concepts.
Data backup and recovery concepts.
Host/network access control mechanisms (e.g., access control list, capabilities list).
Network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
Traffic flows across the network (e.g., Transmission Control Protocol (TCP) and Internet Protocol (IP), Open System Interconnection Model (OSI), Information Technology Infrastructure Library, current version (ITIL)).
Programming language structures and logic.
System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language
Preferred Skills Requirements
Conducting vulnerability scans and recognizing vulnerabilities in security systems.
Assessing the robustness of security systems and designs.
Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
Mimicking threat behaviors.
Use of penetration testing tools and techniques.
Use of social engineering techniques (e.g., phishing, baiting, tailgating, etc.).
Use of network analysis tools to identify vulnerabilities (e.g., fuzzing, nmap, etc.).
Reviewing logs to identify evidence of past intrusions.
Conducting application vulnerability assessments.
Performing impact/risk assessments.
Developing insights about the context of an organization's threat environment.
Collaborating with teammates and other employees.
Communicating effectively in writing and verbally.
Pay and Benefits
The pay range for this position is $75000.00 - $100000.00/yr.
good retirement plan, medical, dental, vision, floating holidays
Workplace Type
This is a hybrid position in Honolulu,HI.
Application Deadline
This position is anticipated to close on Apr 18, 2025.
About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Primary Job Function
Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, policies, or guidance. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.
Assists with risk assessments, and development of security architecture solutions and technologies.
Supports development of detailed proposals and plans for new information security systems and controls to enhance or enable new capabilities for network or hosted applications.
Conducts ongoing compliance reviews; assists in developing practices to ensure adequate information security and IT controls.
Additional Functions
Performs information security risk assessments and recommends mitigating controls and solutions for IT and Operations Technology (OT) projects and applications, including proposals for externally hosted applications and new utility technology projects.
Assists with the system assessments for conformance with configuration control, policy, and guidance.
Assists with program development and management for privacy, e-discovery, security awareness training, digital forensics, vulnerability remediation, and other security and compliance programs.
Performs miscellaneous administrative roles such as schedule development, information tracking, updating deliverables and other work assigned.
Supports the Company's business continuity planning, IT disaster recovery planning, cybersecurity incident response planning and team (CS-IMT), with occasional on-call support.
Participates in Company emergency response activities as assigned, including any activities required to prepare for such emergency response.
Preferred Knowledge Requirements
Computer networking concepts and protocols, and network security methodologies.
Risk management processes (e.g., methods for assessing and mitigating risk).
Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
Cyber threats and vulnerabilities.
Cryptography and cryptographic key management concepts.
Data backup and recovery concepts.
Host/network access control mechanisms (e.g., access control list, capabilities list).
Network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
Traffic flows across the network (e.g., Transmission Control Protocol (TCP) and Internet Protocol (IP), Open System Interconnection Model (OSI), Information Technology Infrastructure Library, current version (ITIL)).
Programming language structures and logic.
System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language
Preferred Skills Requirements
Conducting vulnerability scans and recognizing vulnerabilities in security systems.
Assessing the robustness of security systems and designs.
Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
Mimicking threat behaviors.
Use of penetration testing tools and techniques.
Use of social engineering techniques (e.g., phishing, baiting, tailgating, etc.).
Use of network analysis tools to identify vulnerabilities (e.g., fuzzing, nmap, etc.).
Reviewing logs to identify evidence of past intrusions.
Conducting application vulnerability assessments.
Performing impact/risk assessments.
Developing insights about the context of an organization's threat environment.
Collaborating with teammates and other employees.
Communicating effectively in writing and verbally.
Pay and Benefits
The pay range for this position is $75000.00 - $100000.00/yr.
good retirement plan, medical, dental, vision, floating holidays
Workplace Type
This is a hybrid position in Honolulu,HI.
Application Deadline
This position is anticipated to close on Apr 18, 2025.
About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Salary : $75,000 - $100,000
