Systems Security Specialist

NexSolv is seeking a Systems Security Specialist for our direct client, State of Maryland. Please share your updated resume if you are interested in this position.

Position requirement:

• Develop and implement cloud security controls, cloud-based processes and tools, and cloud security task automation.
• Perform security assessments, working closely with DevOps and Developer teams on identifying security and privacy issues in AWS or Azure and finding solutions to provide required functionality securely.
• Continuously monitor the Health Benefit Exchange (HBX) and ancillary systems, not limited to cloud security operations, responding to security issues and escalating as necessary.
• Conduct security impact analysis of controls on proposed system changes.
• Conduct cloud security assessments and Penetration testing.
• Perform Incident Response and Forensics evaluation using security information and event management (SIEM) tools.
• Review and update systems security documentation and artifacts such as Systems Security Plan, Information Security Risk Assessment, Privacy Impact Assessment, Systems Security Report, Correction Action Plan, Plan of Action & Milestones (POA&M).
• Perform Security Incident Response and Forensics evaluation using security information and event management (SIEM) tools.

Minimum Qualification:

• A minimum of eight (8) years of experience analyzing, defining, deploying, monitoring, and administering security requirements and controls for large and mission-critical IT systems.
• A minimum of five (5) years performing day-to-day security operations functions, including administration, troubleshooting, and resolution of various security components.
• A minimum of four (4) years of hands-on experience in performing cloud security functions.
• A minimum of four (4) years of experience in defining computer security requirements for high-level applications and evaluating approved security product capabilities.
• A minimum of four (4) years of demonstrated production experience using AWS Cloud supporting security operations.
• A minimum of four (4) years of experience with administering security for Windows and Linux operating systems.

Preferred experience

• A minimum of five (5) years of experience implementing, administering, and monitoring Security Controls and Governance for public-facing complex IT systems.
• A minimum of five (5) years of specialized experience in defining computer security requirements for high-level applications, evaluating approved security product capabilities, and developing solutions to multilevel security problems.
• A minimum of five (5) years of hands-on experience providing operational support for ForgeRock and Sailpoint IAM products.
• A minimum of five (5) years of experience with the assessment and evaluation of information systems to recommend changes and mitigate threats, risks, and vulnerabilities.
• A minimum of five (5) years of experience conducting Incident Response testing to evaluate processes for detection, response, and reporting of security incidents.
• A minimum of three (3) years of hands-on experience designing, developing, deploying, and administering security policies for health insurance marketplaces or complex health and human services systems.
• Experience assisting organizations meeting NIST SP 800-37, NIST 800-53, IRS Publication 1075, and MARS-e 2.0 requirements.