What are the responsibilities and job description for the Information Security Specialist - CISSP/CISM position at vTech Solution?
Job Details :
Job Title - Information Security Specialist
Job Location - Silver Spring, MD / Washington, DC
Job Duration - 12 Months with possibility of an extension
Work Module - Hybrid (3 days onsite at Silver spring, MD, 2 days remote)
Job Discription :
Primary Responsibilities :
The candidate will be a part dynamic team that supports Enterprise Scale Infrastructure security, assessment, reporting and remediation of threats in alignment with government standards and compliances such as FedRAMP.
Daily Duties :
- Ensure infrastructure security engineering principles are applied in complete infrastructure management lifecycle. (NIST SP 800-160, NIST SP 800-53).
- Analyze, Evaluate, and recommend standard security measures based on the gap assessment and industry best practices.
- Use various tools and techniques to create cyber resilient infrastructure to cover patching, scanning, and upgrades for enterprise hardware, software, database, and applications.
- Leverage various enterprise tools such as Tenable, McAfee EPO, SCCM, Bigfix to generate security compliance reports.
- Manage and operate security engineering solutions such as IDS / IPS, EDR.
- Establish and maintain security boundary / baseline for infrastructure systems and regularly report status for needed corrective actions.
- Continuously monitor, detect, and remediate threats using log collection solution.
- Develop, document, and maintain benchmarks / baselines for information systems and update as necessary.
- Run periodic baselines scans and generate reporting for security vulnerabilities. Coordinate with System Engineering team for remediation.
- Track and manage reported security incidents, perform root cause analysis, and provide remediation guidance.
- Promote standard configuration management and change management practices across enterprise infrastructure.
- Review and document standard operating procedure for security management, administration, and reporting.
- Participate in evaluating new technologies as per FedRAMP guidelines.
Qualifications :
Public Trust Clearance is required.
