Information Security Analyst (#24-209)

Strategic Analysis Incorporated - Arlington, VA

Full-time

Arlington, VA

Professional, Scientific, and Technical Services

About the position

The Information Security Analyst at Strategic Analysis, Inc. plays a vital role in ensuring the security and compliance of the company's information systems. This position involves both tactical and strategic responsibilities, including threat detection, incident response, and the development of security policies and procedures. The analyst will work closely with the internal operations team to maintain accredited information systems and support various security initiatives.

Responsibilities

• Assist in the administration of accredited information systems in accordance with the RMF, including development and maintenance of documentation for systems, procedures, and security diagrams.
• Monitor and analyze SA's corporate network for unusual or suspicious activity and make recommendations for resolution.
• Ensure user endpoints have the needed security software and administer updates.
• Prepare and analyze security incident and event data reporting.
• Assist in company guidance to meet requirements of NIST 800-171 controls and prepare for CMMC Level 2.
• Deliver high quality customer service and provide Tier 1 and Tier 2 helpdesk support for internal and external customers.
• Install, diagnose, and perform minor repairs to computer and audio visual hardware, software, and peripheral equipment.
• Develop working knowledge and provide customer assistance with all commercial off the shelf (COTS) and proprietary applications.
• Set up information systems and communications equipment for employee use, ensuring proper installation and connectivity.
• Assist with designing, documenting and maintaining processes, policies, and procedures for optimal delivery of information systems services.

Requirements

• Bachelor's degree in an IT related field or equivalent work experience.
• CompTIA Security + certification.
• Four (4) or more years of work experience in IT Security and support or equivalent combination of transferrable experience and education.
• In-depth knowledge of operating systems and security applications, as well as basic network protocols and tools.
• Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management.
• Knowledge of network infrastructure including routers, switches, firewalls, and associated network protocols and concepts.
• Experience developing, documenting, and maintaining security procedures.
• Ability to communicate highly complex technical information clearly and articulately for all audience levels.
• Strong customer focus with the ability to manage customer expectations and build long-term relationships.
• Strong team-oriented interpersonal skills.

Nice-to-haves

• Relevant certifications such as CompTIA CSA+, CASP, or CISSP.
• Experience with SIEM configuration and monitoring, Microsoft Azure Administration, network monitoring and analysis, threat response, DLP, and other Information Security tools and practices.
• Experience with configuring Firewalls, Switches, Multi-Factor Authentication, Proxies, Anti-Virus, DLP, and other Information Security tools.