安全分析师
Security Analyst
开发工程限定地区(需当地身份)
公司The ACI Group, Inc.
薪资未公开
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Contractor
发布时间今天
数据来源Himalayas
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。
安全分析师
- 合同制 - 4个月
- 100% 远程办公
- 由于我们的政府客户要求,我们只能考虑美国公民或绿卡持有者。必须在过去5年中有3年在美国居住。
- 请勿通过第三方招聘机构推荐!候选人必须自行申请。
职责
- 参与支持医疗保险和医疗补助服务中心(CMS)云运营和维护项目团队。
- 使用数据加密、防火墙和其他适当的安全工具和应用程序来隐藏和保护机密数字信息的传输。
- 使用 Splunk、GuardDuty 和 SIEM 平台等工具监控云基础设施安全。
- 分析安全警报和事件以检测潜在威胁或未经授权的访问。
- 按照 CMS 安全指南(例如 NIST 800-53、FedRAMP)调查并响应事件。
- 与 CMS ISSO、安全团队和 ADO 协作,确保符合联邦安全要求。
- 支持云系统和应用的漏洞扫描和修复工作。
- 准备安全报告和指标用于审计和持续监控。
- 维护和更新与 CMS 政策一致的事件响应操作手册。
要求
- 计算机科学理学学士学位。
- 3年以上系统管理员或分析师工作经验。
- 持有认证。所有认证。(Security+、认证道德黑客(CEH)、注册信息系统审计师(CISA)、注册信息系统安全专家(CISSP)或类似认证。(注意:不需要全部持有,但 Security+ 优先)。
- 工作细致,注重细节。
- 了解网络流量如何传输(传输控制协议(TCP)和互联网协议(IP)、开放系统互连模型(OSI)、信息技术基础设施库(ITIL))。
- 了解软件工程、软件开发生命周期(SDLC)和云计算。
- 具备良好的人际交往和沟通能力,能与客户、团队成员和管理层有效合作。
期望
- 上述所有认证。
- 熟悉政府承包(GovCon),可能有支持医疗保险和医疗补助服务中心(CMS)的经验。
- 精通伦理黑客技术、入侵预防、事件响应、计算机取证、逆向工程、网络安全技术。
查看英文原文
Security Analyst
- Contract - 4 months
- 100% Remote
- Due to our government client requirements, we can only consider US Citizens or Green Card Holders for this position. Must have lived in the US 3 of the past 5 years.
- NO THIRD PARTY RECRUITERS PLEASE! CANDIDATES MUST BE SELF-REPRESENTED.
Responsibilities
- Be part of a team that is supporting the Centers for Medicare and Medicaid Services (CMS) Cloud Operations and Maintenance program.
- Use data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information.
- Monitor cloud infrastructure securityusing tools like Splunk, GuardDuty, and SIEM platforms.
- Analyze security alerts and incidentsto detect potential threats or unauthorized access.
- Investigate and respond to incidentsfollowing CMS security guidelines (e.g., NIST 800-53, FedRAMP).
- Coordinate with CMS ISSO, security teams, and ADOsto ensure compliance with federal security requirements.
- Support vulnerability scans and remediation effortsfor cloud systems and applications.
- Prepare security reports and metricsfor audits and continuous monitoring.
- Maintain and update incident response playbooksaligned with CMS policies.
Requirements
- Bachelor of Science Degree in Computer Science.
- 3+ years experience as a system administrator or analyst.
- Certifications. All the certifications. (Security+, Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or similar. (Note, you dont have to have all of them, but the Security+ would be preferred).
- Detail-oriented approach to doing your job.
- Knowledge of how traffic flows across the network (Transmission Control Protocol (TCP) and Internet Protocol (IP), Open System Interconnection Model (OSI), Information Technology Infrastructure Library (ITIL).
- Knowledge of software engineering, the Software Development Lifecycle (SDLC) and cloud computing.
- Strong interpersonal and communication skills to work effectively with customers, team members, and management.
Desired
- All the certifications listed above.
- Familiarity with government contracting (GovCon), and perhaps a history of supporting the Centers for Medicare and Medicaid Services (CMS).
- Well versed in ethical hacking, intrusion prevention, incident response, computer forensics, reverse engineering, cybersecurity techniques.
Please Note:
- Only those individuals selected for an interview will be contacted.
- No calls, inquiries, or Third-Party Vendors please.
- We are an equal opportunity employer. We encourage applications from candidates of all backgrounds and experiences. (The ACI Group is unable to sponsor H1B Visas).
- $1000 Referral Bonus - www.aci.com.
Since 1988, The ACI Group, a Baltimore-based staffing firm, has been committed to hiring the industry's leading professionals, and presenting exciting career opportunities. We have access to varied types of contract, permanent and contract-to-perm positions and offer a choice of employment options including a full benefits package.
Originally posted on Himalayas
本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。
本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。
该公司其他在招职位
AI/ML文档处理开发工程师,远程
AI开发工程限定地区(需当地身份)
高级调查员
职能支持限定地区(需当地身份)