Information Security Analyst II Job at Tucker Parker Smith Group (San Diego)

Information Assurance Specialist I (Information Security Analyst)

Barbaricum is seeking an Information Assurance Specialist I (Information Securit...

Location

United States , Indianapolis

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD Secret Clearance
Bachelor's degree in related field
Meet DoDM 8140.03 IAT III/IAM II requirements
Minimum 2yr experience in network operations and information security
Demonstrated experience assessing security controls based on cybersecurity principles and tenets (e.g., NIST SP 800-53, Cybersecurity Framework, etc.)
In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&A process
Demonstrated experience with continuous monitoring/ongoing authorization

Job Responsibility

Support cybersecurity compliance, risk management, and information assurance activities for Department of Defense (DoD) systems and networks
Assist in assessing and validating security controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD requirements
Support the Security Assessment and Authorization (SA&A) process by reviewing control implementations, identifying risks, and documenting findings
Participate in continuous monitoring and ongoing authorization activities to help maintain system security posture and compliance
Assist with vulnerability assessments, security reviews, and remediation tracking efforts across enterprise environments
Collaborate with system administrators, engineers, and cybersecurity personnel to implement and maintain required security controls
Develop and maintain cybersecurity documentation, including assessment reports, compliance artifacts, and authorization support materials
Monitor security-related activities and provide recommendations for risk mitigation and control improvements
Support compliance with the Risk Management Framework (RMF), organizational policies, and applicable federal and DoD cybersecurity standards
Stay informed on cybersecurity threats, vulnerabilities, and best practices to support effective information assurance operations

Fulltime

Information Assurance Specialist – III (Information Security Analyst)

Barbaricum is seeking an experienced Information Assurance Specialist III (Infor...

Location

United States , Indianapolis

Salary:

Not provided

Barbaricum

Expiration Date

Until further notice

Requirements

Active DoD Secret Clearance
Bachelor's degree in related field
Must meet DoDM 8140.03 IAT III/IAM II requirements
Minimum 10yr experience in network operations and information security
Demonstrated experience assessing security controls based on cybersecurity principles and tenets.(e.g., NIST SP 800-53, Cybersecurity Framework, etc.)
In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process
Relevant DOD, DHS or .gov Cyber Security Information Assurance focused experience with specific current hands-on researching, writing, and submitting complete A&A documentation packages for new system authorizations

Job Responsibility

Assess, implement, and validate cybersecurity controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD cybersecurity requirements
Support the Security Assessment and Authorization (SA&A) process by evaluating security controls, identifying risks, and recommending mitigation strategies
Develop, review, and maintain Assessment and Authorization (A&A) documentation packages to support system accreditation and authorization efforts
Conduct security assessments, vulnerability analyses, and compliance reviews to ensure systems meet federal and DoD cybersecurity standards
Collaborate with system owners, engineers, and cybersecurity teams to implement security controls and maintain a strong security posture across enterprise environments
Support continuous monitoring activities, including risk assessments, control validation, remediation tracking, and reporting
Provide cybersecurity guidance and recommendations related to information assurance, risk management, and regulatory compliance
Prepare technical reports, security documentation, and executive briefings to support authorization decisions and stakeholder requirements
Ensure compliance with Risk Management Framework (RMF), DoD policies, and applicable government cybersecurity regulations
Serve as a subject matter expert on information assurance, cybersecurity controls, accreditation processes, and security compliance initiatives

Fulltime

Security Analyst II

Security represents the most critical priorities for our customers in a world aw...

Location

United States , Redmond

Salary:

100600.00 - 199000.00 USD / Year

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR equivalent experience
Active U.S. Government Top Secret Clearance with access to Sensitive Compartmented Information (SCI) based on a Single Scope Background Investigation (SSBI) with Polygraph
Ability to meet Microsoft, customer and/or government security screening requirements pre-offer and post-hire
Verification of U.S. citizenship

Job Responsibility

Perform investigation on suspected vulnerable or compromised assets and services, and analyze log data and other artifacts to determine what occurred
Identify potential issues with detection (e.g., false positives, noise)
Analyze potential or actual intrusions identified as a result of monitoring activities
Create detections based on available data (e.g., Indicators of Compromise [IOC] and Tools Tactics Procedures [TTP])
Plan and execute proactive adversary hunt for malicious activity using myriad log sources, network- and host-based tools, and threat intelligence to identify the threat actors and their tools and techniques
Analyze key metrics and Key Performance Indicators (KPIs) and other data sources (e.g., bugs, unhealthy data pipeline) and identifies trends in security issues and escalates appropriately
Recommend improvements and/or metrics to address gaps in measurement
Proactively identify and investigate potential issues in controls (e.g., network, identity, etc.)
Leverage expertise and team members to address and drive down issues accordingly
Identify and/or recognize patterns and recommend potential mitigation strategies

Fulltime