Senior Information Security Analyst (Gen)

Ampcus - Surry, VA

Full-time - Mid Level

Surry, VA

Professional, Scientific, and Technical Services

About the position

The Senior Information Security Analyst will join the IT Nuclear Cyber Security Team at Ampcus Inc. to support the Nuclear Business Unit. This role focuses on the implementation and maintenance of the nuclear cyber security program, including intrusion detection systems and cyber security monitoring systems. The analyst will be responsible for ensuring compliance with the Cyber Security Plan and addressing security breaches related to Critical Digital Assets (CDAs).

Responsibilities

• Maintenance, troubleshooting, and patching of cyber security monitoring systems including Security Information and Event Management (SIEM) systems and software.
• Maintenance, troubleshooting, and patching of Trellix and OPSWAT malware detection systems.
• Review and analysis of Security Controls Analysis documentation as a member of the Cyber Security Assessment Team (CSAT).
• Participation on the Nuclear Cyber Security incident response team (CSIRT).
• Analysis of Critical Digital Assets (CDAs) for security breaches and ensuring compliance with the Cyber Security Plan.
• Performance of rogue wireless access point scans throughout the station power block and monitoring CDAs for rogue connections.
• Performance of hardening of Windows and Linux workstations and servers.
• Review of industry guidance for cyber security and application of principles to critical systems and critical digital assets.
• Identification of gaps in cyber security controls and recommendation of technical or administrative solutions to remediate the gaps.
• Review of Change Management Records and Design Change Packages for cyber security compliance and impacts.
• Review of cyber security policies, standards, and procedures in support of programmatic requirements to meet the Cyber Security Plan.
• Performance of periodic scans and maintenance of removable media enrolled in the Portable Media Device program.
• Perform other duties as requested or assigned.

Requirements

• Experience with network design and security, firewall configurations and management for Windows or Linux operating systems.
• Ability to work well independently and in a team environment, communicate effectively, and make decisions appropriately after consultation.
• Familiarity with security principles and defense-in-depth techniques.
• Familiarity with VMware, McAfee (Trellix) ePO and ESM, backup software, ELK Stack, Kibana.
• Familiarity with nuclear security controls analysis.
• Understanding of Nuclear Cyber Security and Access Control and Intrusion Detection Systems.
• Dedication to continuous improvement and implementation of cyber security best practices to support regulatory compliance objectives.
• Excellent verbal and written communication skills, with the ability to present concepts and recommendations in a group setting.
• Proficiency in Microsoft Office software and collaboration tools.

Nice-to-haves

• Experience with network switches, firewalls, and network security devices.
• Knowledge of network security tools and Active Directory.
• Experience in cyber forensics.
• Cyber Security Qualification - GSEC, CISSP, Security+, or similar certifications.
• Completion of SANS 401 and 504 courses.