Job Description
Please note the following items: If you're an external recruiter looking to market candidates to my positions, I do not work with other third-party agencies (c2c or w2). I wish you the best in your search.
Role requires USC or GC, and must be able to pass a formal criminal background check.
Information Security Analyst – Brighton, CO (12 month contract)
Summary: Responsible for monitoring intrusions and malicious activity, assessing effectiveness of security controls, identifying gaps, assessing risk, and overseeing compliance with laws and regulations pertaining to information systems. This role requires a holistic approach to security risk assessment and the ability to contextualize problems and formulate solutions using frameworks, guidelines, threat intelligence, and industry best practices.
Key Responsibilities:
- Monitor systems and networks for malicious activity.
- Participate in internal and external security and compliance audits.
- Install, configure, and support technical security controls.
- Maintain security policies, procedures, guidelines, and standards.
- Promote information security awareness across the organization.
- Serve as a technical role in the incident response team.
- Perform vulnerability scans and remediation efforts.
- Monitor and manage Data Loss Prevention solutions.
- Assist with System Security Plans and other compliance documentation.
- Operate and monitor security solutions under IT Security group responsibility.
- Research and stay current on threats, vulnerabilities, tools, and techniques.
- Support day-to-day operations and respond to operational alerts.
Qualifications:
- Bachelor’s degree in Information Security, Computer Science, Telecommunications, or related field (or equivalent experience).
- 3+ years of experience in technology or information security roles.
- Working knowledge of HIPAA, PCI, NIST compliance frameworks.
- Skilled in log and packet analysis.
- Knowledge of SAML, Microsoft ADFS, firewall administration, TCP/IP networks.
- Proficiency with Windows and Linux operating systems.
- Experience with Azure and Office 365 is a plus.
- Certifications preferred: Security+, GIAC, OSCP, CISSP, CCSP.
- Strong technical background in enterprise networking and datacenter environments.
- Experience with Nexpose, Metasploit, Kali Linux a plus.
- Excellent communication and interpersonal skills.
Job Tags
Contract work, Work at office,