信息安全分析师资深专家
Information Security Analyst Principal
职位类型：
常规职位
所需安全级别（目前必须具备）：
无
所需安全级别（可获得）：
无
其他要求：
MBI (T2)
职位系列：
网络与IT风险管理
职位资格：
技能：
IT安全服务、IT安全支持、IT系统安全
认证：
无
经验：
10年以上相关经验
美国公民要求：
否
职位描述：
GDIT是你的舞台。在这里，你可以打造属于自己的空间。带着你的创造力，帮助我们找到解决复杂问题的简单方案。在GDIT，你将发挥关键作用，为国家的未来做好准备。我们正在寻找一名信息安全管理高级顾问加入我们的团队，以支持印第安健康服务局（IHS）。
在这个职位上，典型的一天包括：
- 为DHHS的信息安全提供支持。
- 为当前的安全基础设施提供支持，并定义未来项目，设计和实施防火墙及其他相关安全问题。
- 分析信息系统，确保适当的安全功能已包含在系统设计和架构中。
- 通过协助开发人员并为开发变更进行安全影响评估，参与IHS的开发过程。
- 协助实施缓解措施或控制措施。
- 在制定和维护标准操作程序和其他类似文档（包括系统安全计划、安全手册等）方面提供指导。
- 管理与政府投资支持系统相关的POAM响应和/或补救措施。
- 保持对指定相关技术的最新了解。
- 根据需要参与特殊项目。
- 了解当前和新兴的安全要求（例如零信任、SBOM等），并向团队传达影响。
- 成为GDIT团队与客户安全组织之间的沟通渠道
你需要具备：
- IT安全、计算机科学或相关技术领域的学士学位，以及10年相关经验（或硕士学位和8年相关经验，或博士学位和6年相关经验）。
- 需要具备IT安全实施和监控能力。
- 具备科学流程、管理结构和技术项目/平台的一般知识
- 熟悉敏捷软件开发生命周期（SDLC）方法
- 精通数据安全管理员的原则、方法
查看英文原文
Type of Requisition:
RegularClearance Level Must Currently Possess:
NoneClearance Level Must Be Able to Obtain:
NonePublic Trust/Other Required:
MBI (T2)Job Family:
Cyber and IT Risk ManagementJob Qualifications:
Skills:
IT Security Services, IT Security Support, IT System SecurityCertifications:
NoneExperience:
10 + years of related experienceUS Citizenship Required:
NoJob Description:
GDIT is your place. You make it your own. Bring your creativity to help us find simple solutions to complex problems. By owning your opportunity at GDIT, you’ll play an essential part in preparing our nation for the future. Our work depends on a Information Security Analyst Sr Advisor joining our team to support Indian Health Service (IHS).
In this role, a typical day will include:
- Provide support for DHHS information security.
- Provide support for facilitating current security infrastructure and define future programs, design and implementation of fire-wall and other related security issues.
- Analyzes the information systems to ensure that appropriate security functions have been included in the systems design and architecture.
- Participates in IHS development processes by providing assistance to developer and conducting security impact assessments for development changes.
- Assists with implementation of counter-measures or mitigating controls.
- Provides guidance in the creation and maintenance of Standard Operating Procedures and other similar documentation including System Security Plans, Security Manuals, etc.
- Manage responses and/or remediation of POAMs related to government investment supported systems.
- Maintains current knowledge of relevant technology as assigned.
- Participates in special projects as required
- Stay informed as to current and emerging security requirements (e.g, zero trust, SBOM, etc.) and communicate impacts to the team.
- Be the conduit between the GDIT team and customer security organizations
WHAT YOU’LL NEED:
- Bachelor’s Degree in IT Security, Computer Science, or a related technical discipline, and 10 years of related experience (or) Master's Degree and 8 years (or) PhD/Doctorate and 6 years of related experience.
- IT Security implementation and monitoring required.
- General knowledge of scientific processes, management structures, and technology programs/platform
- Familiarity with Agile Software Development Lifecycle (SDLC) Methodology
- Expert knowledge of data security administration principles, methods, and techniques.
- Familiarity with domain structures, user authentication, and digital signatures.
- Broad knowledge of security (IA) practices and tools is required
- Understanding of network configuration and monitoring.
- Understanding of federal security policies and procedures, including FIPS 199, FIPS 200, and NIST 800-53.
- Security certification such as a CISSP or CISA
IT WOULD BE GREAT IF YOU ALSO HAD:
- Familiarity with Electronic Healthcare technology and operations
- Familiarity with Source Code Control/Version Management software
- Knowledge of the VistA electronic health record or Resource Patient Management System (RPMS)
- Understanding of the Department of Health and Human Services (HHS) Enterprise Performance Life Cycle (EPLC)
LOCATION: Remote within the USA
CLEARANCE: Requires the ability to pass an IHS background check in order to obtain an appropriate level Public Trust clearance.
WHAT GDIT CAN OFFER YOU:
- Full-flex work week to own your priorities at work and at home, with core work hours Monday – Friday 9:00 AM ET – 3:00 PM ET.
- 401K with company match.
- Comprehensive health and wellness packages.
- Internal mobility team dedicated to helping you own your career.
- Professional growth opportunities including paid education and certifications.
- Cutting-edge technology you can learn from.
- Rest and recharge with paid vacation and holidays.
- Challenging work that makes a real impact on the world around you.
- Remote work.
#GDITFedHealthJobs
The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:
40Travel Required:
Less than 10%Telecommuting Options:
RemoteWork Location:
Any Location / RemoteAdditional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year. Paid leave and paid holidays are prorated based on the employee’s date of hire. The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.
Our Identity Verification Process:
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.About Our Work:
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected VeteransOriginally posted on Himalayas