IT Security Analyst

As an IT SECURITY ANALYST, you will work with the various IT and business groups for several key IT security initiatives. This role will act in an advisory and resource role to assist the operational groups in addressing key IT initiatives regarding information security. You should have a solid understanding of IP Networking, Firewalls, as well as experience in IPS and Firewall management from a conceptual view. AD and Windows server/desktop administration and configuration experience is necessary since this individual must understand the impacts of policy and configuration changes on these environments. You will perform the necessary background work, research, and meetings with internal stakeholders to ensure technical implementations of information security items are addressed and documented. The Security Analyst will have several projects running in Tandem and must be able to prioritize deadlines and objectives. The position requires an individual that can take charge of the various projects and work with the various stakeholders of those projects to ensure their completion. Prior experience in an IT operational role such as server administration or networking will be very helpful in this role.

DUTIES:

- Install and configure a vulnerability management solution that replaces the current solution
- Perform vulnerability scans of the internal network and external websites
- Report and monitor vulnerabilities in the infrastructure as well as the remediation of those vulnerabilities
- Assist in the management of open technical vulnerabilities by working with the business groups and IT
- Collaborate with the Networking team on the configuration of Firewalls to ensure the rules are sufficiently restrictive and are documented properly
- Collaborate with IT to design GPO's that maximize security and restricts services and rights where possible
- Work with IT to analyze impacts of GPO changes and configurations
- Maintain documentation of IT configurations
- Work with IT on host based IPS systems
- Work with IT on HIPS policy and testing changes to HIPS policies
- Work with vendor support for any issues concerning HIPS policy
- Collaborate with IT on MBSA configurations and changes to ensure a secure configuration of Servers with the minimum services required to perform their function
- Work with IT to analyze impacts of server changes and configurations
- Apply server build standards to compliance solution to monitor compliance to required configurations
- Collaborate with Networking team on network-based IPS configuration
- Work with IT and Networking team on NIPS policy
- Work with vendor support for any issues concerning NIPS policy
- Collaborate with Networking team on the configuration of the web-based filtering systems
- Work with IT and Networking team to Implement and test WBF policy changes
- Collaborate with the Application Support team to ensure information security is addressed in the development of new applications
- Perform web application scans to ensure security measures and practices are in place for external facing applications
- Work with Application Support team to ensure open web application vulnerability items are addressed

REQUIRED SKILLS:

- 5 years plus IT experience
- Basic understanding of Firewall technologies and rule set configuration
- Basic understanding of TCP/IP Networking
- Basic understanding of host-based and network-based IPS
- Solid understanding of Active Directory, Windows Server, and Windows Desktops
- Experience in configuring group policy objects and applying them to Windows Servers and workstations
- Experience in using MBSA in an AD environment
- Experience in addressing security vulnerabilities and patching Servers, desktops and networking equipment
- Basic understanding of web server and web programming techniques
- Experience in managing IT projects to completion
- Solid analytical skills
- Excellent verbal and written communications
- Ability to communicate within the various IT groups as well as application owners
- Strong interpersonal and professional skills required
- Technical documentation skills a must
- Microsoft server/desktop certifications a plus
- CISSP or other security certifications a plus

This contract position is expected to be 6 months in duration.