---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Information Assurance Analyst
Location: Saint Charles, Missouri, United States
Type: Permanent F/T
Closing Date: 2008-02-22
Title: IT Security Analyst
Description
The IT Security Analyst performs day-to-day operations in support of client and
organizational in-place security solutions while the second is the
identification, investigation and resolution of security breaches detected by
those systems. Secondary tasks may include involvement in the implementation of
new security solutions, participation in the creation and or maintenance of
policies, standards, baselines, guidelines and procedures as well as conducting
vulnerability audits and assessments. The IT Security Analyst is expected to be
fully aware of the client enterprise’s security goals as established by
its stated policies, procedures and guidelines and to actively work towards
upholding those goals.
Responsibilities:
Strategy & Planning
• Participate in the planning and design of client and organizational
enterprise security architecture.
• Participate in the creation of client and organizational enterprise
security documents (policies, standards, baselines, guidelines and procedures)
under the direction of the IT Security Manager, where appropriate.
• Participate in the planning and design of client and enterprise
Business Continuity Plan and Disaster Recovery Plan, under the direction of the
Director of Information Technology Technical Operations, where appropriate.
Acquisition & Deployment
• Maintain up-to-date detailed knowledge of the IT security industry
including awareness of new or revised security solutions, improved security
processes and the development of new attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing
security solutions to improve overall client and organizational enterprise
security.
• Perform the deployment, integration and initial configuration of all
new security solutions and of any enhancements to existing security solutions
in accordance with standard best operating procedures generically and the
enterprise’s security documents specifically.
Operational Management
• Maintain up-to-date client and organizational baselines for the secure
configuration and operations of all in-place devices, whether they be under
direct control (i.e., security tools) or not (i.e., workstations, servers,
network devices, etc.).
• Maintain client and organizational operational configurations of all
in-place security solutions as per the established baselines.
• Monitor all client and organizational in-place security solutions for
efficient and appropriate operations.
• Review logs and reports of all client and organizational in-place
devices, whether they be under direct control (i.e., security tools) or not
(i.e., workstations, servers, network devices, etc.). Interpret the
implications of that activity and devise plans for appropriate resolution.
• Participate in client and organizational investigations into
problematic activity.
• Participate in the design and execution of client and organization
vulnerability assessments, penetration tests and security audits.
• Provide on-call support for client and organizational end users for all
in-place security solutions.
Work Conditions
• 40-hour on-site work week with on-call availability as required.
• Ability to travel required.
• Sitting for extended periods of time.
• Sufficient dexterity of hands and fingers to efficiently operate a
computer keyboard, mouse, and other computer components.
• Lifting and transporting of moderately heavy objects, such as computers
and peripherals as required.
JOB REQUIREMENTS
---------------------------------------------------
Position Requirements
Formal Education & Certification
• BA or BS in IT related field and 2 – 5 years equivalent work
experience.
• One or more of the following certifications:
o (ISC)2 – International Information Systems Security Certification
Consortium
o CISSP – Certified Information System Security Professional
o CCSP – Cisco Certified Security Professional
o GIAC – Global Information Assurance Certification
o SCNP – Security Certified Network Professional
o CompTIA Security+
o MCSA – Microsoft Certified Systems Administrator: Security
Knowledge & Experience
• Strong technical knowledge of network and PC operating systems,
including Microsoft Windows XP and Microsoft Window Vista.
• Extensive experience with core software applications, including
Microsoft Office, Project and Visio 2003 / 2007.
• Demonstrated project management skills and project management software
skills.
• Strong technical knowledge of current network hardware, protocols, and
standards, including servers, switches, routers, VoIP Telephony, TCP/IP (IPv4,
IPv6) and other network administration protocols.
• Extensive application support experience with Microsoft Windows Server
2003, Microsoft Windows Exchange 2003 / 2007.
• Extensive experience with VPN, firewall and intrusion detection
enterprise solutions.
• Experience with BCP and DRP planning and execution.
• Strong understanding of strategic security planning using regulatory
compliant guidelines and industry standard best practices.
• Familiarity with security process definitions, improvements, and
management.
Personal Attributes
• Proven analytical and problem-solving abilities.
• Exceptional written, oral, and interpersonal communication skills.
• Ability to conduct research into IT security issues and products as
required.
• Proven analytical, evaluative, and problem-solving abilities.
• Ability to effectively prioritize and execute tasks in a high-pressure
environment.
• Exceptional customer service orientation.
• Extensive experience working in a team-oriented, collaborative
environment.
• Ability to present ideas in business-friendly and user-friendly
language.
• Highly self motivated and directed.
• Keen attention to detail.
• Team-oriented and skilled in working within a collaborative environment.
CONTACT
---------------------------------------------------
Please e-mail a soft-copy resume or apply online (refer to "IT Security
Analyst").
The Newberry Group, Inc.
Jack Kennedy
Corporate Recruiter
JKennedy@thenewberrygroup.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
