Cyber Security Analyst 2 - Risk Assessment

Top 3 Skills:
Information Security Auditing
Risk Assessment
Network & Penetration Testing
CISSP, CISM, CISA

The Department of the Secretary of State (SoS) performs functions considered critical infrastructure by the Department of Homeland Security and our information system is audited by the Social Security Administration and others to ensure the appropriate security controls are in place to protect sensitive information. The Department implemented the NIST Risk Management Framework (RMF) and requires information security expertise to assist with creating, revision and management of RMF-related documentation and prepare or independent assessment of the information system.

Required Skills & Qualifications:
Experience with Security Onion, ELK stack, and Threat Down.
Minimum 4 years of information security experience.
Strong analytical skills for effective security analysis and incident response.
Ability to identify endpoint anomalies and malware exploitation techniques.
Understanding of social engineering tactics.
Ability to take prompt action on security events and collaborate with team members or subject matter experts.

Preferred Skills
Bachelor's degree in a relevant information technology field.
Five or more years of experience in information security.
Hands-on experience in risk management, information security assessment, security architecture, and incident response.
Strong knowledge of IT infrastructure is a plus.
Familiarity with NIST standards (Risk Management Framework or Cybersecurity Framework)