Cyber Security Analyst III

description

• providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure edso's confidentiality, integrity, and availability
• modifying and implementing secure network connectivity between amazon web services and the usmc
• evaluating and remediating potential security risks, where identified
• evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing,waf, and ci/cd pipeline security risk
• supporting devsecops pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and ci/cd security controls
• supporting cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities
• coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available il6 cloud services
• provides operations and customer support for all services, to include, but not limited to:
  • operating system maintenance
  • vpc configuration
  • infrastructure as code tools
  • amazon web services (aws)
  • scca network components (cisco routers and f5 devices)
  • scca firewall (palo alto)
  • identity and access management - active directory (ad)
  • multi-factor authentication
  • intrusion detection and intrusion prevention system (ids/ips)
  • assured compliance assessment solution (acas)
  • microsoft defender
  • windows server update services (wsus)
  • online certificate status protocol (ocsp)

#li-ll1

• bs degree in engineering, physical science, physics, network security, computer science
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria
• experience with devsecops practices, secure ci/cd pipelines, configuration management, infrastructure as code, and secure software-delivery processes
• experience with cloud automation, and infrastructure-as-code tools (ansible, terraform, cloud formation, lambda)
• experience with python, json
• experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity
• experience with risk management framework (rmf), security technical implementation guides (stigs), continuous monitoring, vulnerability management, and cyber security compliance
• experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports
• ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• amazon web services (aws) experience
• five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• desire to work in a secure lab environment
• holds an comptia security+ or higher certification

• experience with container security
• experience supporting gitlab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and ci/cd pipeline controls
• experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis
• experience…