Daily Duties / Responsibilities:This is a hands-on technical role reporting to the Client's Office of Cybersecurity SOC lead. The analyst will support Client leadership, business units, partners, and vendors in day-to-day cybersecurity operations.
Security Program Experience (strongly desired):
- CMS ARC-AMPE, HIPAA, NIST, or other FISMA RMF frameworks
- Performing repeatable security processes supporting compliant enterprise architectures
- Supporting security considerations for multi-tenant cloud environments and vendor integrations
Technical Experience:
- Secure network design principles
- Windows, macOS, and Linux operating systems
- Switching and Routing
- Enterprise Firewalls
- Network auditing
- IDS/IPS platforms
- Network security monitoring
- SIEM platforms such as QRadar, Splunk (Preferred)
- Vulnerability scanning tools (Nessus, Qualys, etc.)
- Cloud Infrastructure Security (Preferred)
Essential Responsibilities:
- Assist in maturing network security and compliance solutions
- Investigate and respond to daily network alerts
- Perform network security assessments for proposed firewall and infrastructure changes
- Conduct technical analysis for network security planning and engineering
- Review and assess connectivity, website block, and firewall rule requests to ensure no elevated risk to the agency
- Analyze on-premise and cloud networks for potential threats
- Develop, review, and analyze network traffic reports that violate approved standards governing Ports, Protocols, and Services
- Monitor emerging threat vectors and recommend countermeasures
- Collaborate with other areas of the agency to implement security controls
- Support cloud and on-premise network changes and enhancement projects
- Ensure compliance with ARC-AMPE, HIPAA, and SCDIS-200
- Assist with KPI creation and trend report monitoring
- Participate in firewall configuration reviews and ruleset recertification
- Provide guidance on best practices to technical teams
- Perform additional SOC duties as assigned
Required Skills (in order of importance):- Approximately 3-5 years of hands-on experience in network design, implementation, or support
- Hands-on experience in IT security or system administration
- Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models
- Ability to analyze logs, alerts, and network telemetry
- Proficiency with Microsoft Office tools
Preferred Skills (in order of importance):- Experience working in regulatory environments
- Experience supporting health IT or state government
- Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards
- Cloud network security controls (Azure or AWS)
Required Education/Certifications:- BS degree in Computer Science, Information Systems, Cybersecurity, or related field; or equivalent experience
- A network security centric certification such as PCNSE or CCNA
Preferred Education/Certifications:- CISSP or Security+
