InfoSec Analyst

Job Summary:

The contractor will conduct detailed security reviews for new and existing products including software, hardware, networks, cloud and AI-based services with a strong emphasis on compliance and risk documentation.

In addition to analysis and reporting, this person will provide technical support on security incidents, email security issues, malware alerts, Active Directory tasks, MFA and Entra ID actions.

Key Requirements:

• Minimum of 5 years of direct information security experience
• Strong working knowledge of NIST SP 800-53, PCI-DSS, HIPAA, CJIS, and other regulatory frameworks
• Proven technical writing and analysis capabilities
• Undaunted by new/unfamiliar products and technology: able and eager to research new technology and security trends, rapidly learn, and quick identify possible security weaknesses and their potential mitigation strategies
• Practical experience in incident response, malware investigations, and typical tier 1 / tier 2 security operations ticket handling
• Hands-on familiarity with Active Directory, MFA, and Microsoft Entra ID administration
• Demonstrated experience with security governance, risk, and compliance (GRC) processes
• Able to be CJIS cleared upon hire

Preferred Qualifications:

We would prefer candidates who also have experience with our current security toolset, which includes:

• Palo Alto Cortex XDR
• Palo Alto Cortex XSIAM
• Palo Alto Firewalls and Panorama
• Active Directory
• M365 Entra ID
• Mimecast Email Security
• Mimecast Web Security
• Keeper (password and secrets management)
• Qualys Vulnerability Management
• ServiceNow (ticketing and workflow)
• Entrust Certificate Authority