Security Administrator/Analyst to join our team in South Jersey to support our growing operations. The ideal candidate will have demonstrated experience in establishing and enforcing security controls, policies and procedures over a company's information systems and networks and ensuring security compliance with established industry standards such as NIST 800-171R2, ISO 27001, and ISO 27002. This position requires "hands-on" expertise in applying and maintaining off-the-shelf security applications as well as performing continuous reporting/analysis of network and computer activity, security incidents and alerts. The candidate will be working in an established security team in partnership with our IT team to ensure that NDI is compliant with our customers' security requirements.
Responsibilities - Implementation, assessment and audit of security policies, controls and procedures in accordance with NIST 171R2 and Cybersecurity Maturity Model Certification (CMMC).
- Manages and configures security applications that monitor activity on the NDI corporate networks and analyzes/reports from those tools to identify unusual behavior and reported security events to prevent unauthorized access, vulnerability scanning and remediation, risk analysis, modification and/or destruction of files, email, operating system or applications.
- Manages, configures and updates NDI security applications/tools that monitor activity on the NDI network. These applications include Endpoint Management System (EMS), Network Analyzer, Endpoint Detection and Response (EDR), SIEM, email security gateway and Identification/Authentication.
- Conduct continuous security assessments, audits, and reviews to identify potential risks and vulnerabilities for remediation to ensure compliance with NIST 800-171R2 and CMMC security control requirements.
- Monitor user authentication and access activities and enforce security access control policies
- Plan and recommend changes to increase the security of the NDI network and attached devices (servers, workstations, laptops)
- Proactively identifies network vulnerabilities using penetration testing, vulnerability scans and vulnerability assessment reports
- Implementation and updating NDI business continuity and disaster recovery policies and procedures
- Implementing network security policies, application security, access control and corporate data safeguards
- Training fellow employees in security awareness and procedures
Requirements - Must be a US citizen and able to qualify for a DoD Secret clearance.
- Associates Degree in Information/Computer Science or related field, or Military Service in Cybersecurity
- 3-5 years' experience as System Security Administrator/Security Analyst
- CompTIA Cybersecurity Analyst (CySA+) or Certified Information Systems Security Professional (CISSP) certification.
- Demonstrated Hands-On experience in security application configuration, implementation and application sustainment experience (trouble shooting problems, application updates, log file analysis) Knowledge of Windows 11, Windows Server 2022, Esxi and Linux.
- Ability to work on-site in our offices is required. Ability to provide periodic after-hours support for infrastructure weekend maintenance and related emergencies
- Familiarity with NIST Cyber Security Standards (171R2, 800-53R5) or ISO 27001/27002 Security Standard and Cybersecurity Maturity Model Certification (CMMC)
- Good verbal and written communications skills along with ability to implement feedback from engineers, follow work instructions and work somewhat independently are highly desirable traits.
