Information Security Analyst
Found in: Appcast Linkedin GBL C2 - 2 weeks ago
Position- Information Security Analyst – Remote
Location: Open to remote
Assignment Type: 6 months- possible CTH or extension
Work Authorization- GC and USC
Must Have: 3+ Threat models, Strong understanding of access controls and authentication mechanisms, PKI, and cryptography
Preferred: CCSP, OSCP
Position Overview:
Information Security Analyst will partner closely and collaboratively with Enterprise Architecture (EA), Developers, Platform Owners, and other areas of the firm to help ensure Freddie Mac provides secure services and solutions.
Duties and Responsibilities:
• Assess Security Risk from an Architectural Perspective and Apply a Risk-Based Approach to Security
• Generate application treat models in a quick paced environment
• Manage workloads using Kanban methodologies to estimate and track task deliveries
• Mentor, assist, and share your expertise with team members
• Attend regular standups and team meetings
• Identify and be able to explain security weaknesses to a variety of audiences to include but not limited to software development teams
• Hold brown bag sessions to educate developers on the value and benefit that they and the firm derive by identifying threats early
• Develop training material for how to engage the Threat Management service, make use of technologies, and interpret findings.
• Drive beneficial security change into the business through supporting Developers with creation of threat models for their applications and remediation of potential threats, balancing risk against business need.
• Support the Security Architecture team to develop and mature an Application Threat Modeling Program by defining processes, procedures, controls, KRI’s/KPI’s, etc., that identify threats early in the development process reducing risks prior to deployment.
• Work with the InfoSec functional teams in the development of the Information Security strategy and roadmap, including and with focus on Threat Modeling; liaison and consult with Enterprise Architecture, IT and the business for ongoing input and awareness
• Advise and Contribute to Strategy and Roadmaps
Qualifications:
• Strong understanding of access controls and authentication mechanisms, PKI, and cryptography
• Demonstrated experience developing technical threat models
• Demonstrated experience performing security code reviews and explaining results to project teams
• Previous or active experience with bug bounty programs
• Experience working in Sprint or Agile environments
• Strong understanding of protocols, networking, firewalls, caching, VIPs, proxies, web applications, and database systems
• Experience with AWS and Azure or working knowledge of GCP
• Knowledge of several of the following programming languages; Java, C#, Python, C++, Node.JS, JavaScript
• Knowledge in one or several of the following Frontend frameworks; React, Angular, Ember, Vue
• Minimum of 3 years’ experience working as an Information Security Threat Modeling subject matter expert at a senior level
• Minimum of 5 years’ experience working as an Information Security Professional, preferably within the architecture or engineering disciplines
• Passion for leading change and ability to bring others along
• (Desirable) Able to provide references to CVEs filled, Bug Bounty Username, or GitHub repositories
• (Desirable) One or more security-related certifications associated with AWS, GCP, or Azure
• (Desirable) CISSP (+ ISSAP), CCSP, CEH, OSCP, CSSLP
-
Information Security Analyst
3 days ago
Charlotte, United States Strategic Staffing Solutions Full timeInformation Security Analyst W2 ONLY- NO C2C Location: Charlotte, NC Setting: Hybrid Contract: 12+ months Job Description: • Consult on complex initiatives with broad impact and large-scale planning for Information Security Analysis. • Review and analyze complex multi-faceted, larger scale or longer-term Information Security...
-
Information Security Analyst
3 days ago
Charlotte, United States Strategic Staffing Solutions Full timeInformation Security Analyst W2 ONLY- NO C2C Location: Charlotte, NC Setting: Hybrid Contract: 12+ months Job Description: • Consult on complex initiatives with broad impact and large-scale planning for Information Security Analysis. • Review and analyze complex multi-faceted, larger scale or longer-term Information Security...
-
Information Security Analyst
3 days ago
Charlotte, United States Strategic Staffing Solutions Full timeInformation Security Analyst W2 ONLY- NO C2C Location: Charlotte, NC Setting: Hybrid Contract: 12 months Job Description: • Consult on complex initiatives with broad impact and large-scale planning for Information Security Analysis. • Review and analyze complex multi-faceted, larger scale or longer-term Information Security Analysis challenges that...
-
Information Security Analyst
7 hours ago
Charlotte, United States Motion Recruitment Partners LLC Full timeInformation Security Analyst Charlotte, NC **Hybrid** Contract $53.56/hr - $60.35/hr Outstanding contract opportunity! A well-known Financial Services Company is looking for a Information Security Analyst in Charlotte NC (Hybrid). Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract opportunity...
-
Information Security Analyst
4 days ago
Charlotte, United States Motion Recruitment Partners LLC Full timeInformation Security Analyst Charlotte, NC **Hybrid** Contract $69.5/hr - $78.31/hr Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Information Security Analyst in Charlotte, NC (Hybrid). Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract...
-
Senior Information Security Analyst
1 week ago
Charlotte, United States Wells Fargo Full timeSenior Information Security Analyst (Contract) Charlotte, NC, United States (Hybrid) Contract (12 months) Published 9 days ago thrid party risk Title : Senior Information Security Analyst Location : Charlotte, NC Chandler, AZ Duration : 12 months Benefits on offer for this contract position : Health Insurance, Life insurance, 401K and Voluntary...
-
Information Security Analyst
Found in: beBee jobs US - 3 days ago
Charlotte, North Carolina, United States Motion Recruitment Full timeOutstanding long-term contract opportunity A well-known Financial Services Company is looking for a Information Security Analyst in Charlotte, NC (Hybrid).Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract opportunity that includes a competitive benefit package Our client has been around for...
-
Information Security Analyst 4
5 hours ago
Charlotte, United States Randstad North America, Inc. Full timeRandstad Digital is hiring and we're looking for someone like YOU to join our team! If you are seeking a new opportunity, looking to grow in your career, or you know someone who is - we want to hear from you! Take a look at the below opportunity, or Security Analyst, Information, Security, Analyst, Staffing, Technology
-
Lead Information Security Analyst
2 weeks ago
Charlotte, United States Experis Full timeLOB: Cyber Security - Vulnerability Group - Lead Information Security Analyst 12+ month contract Hybrid Schedule Looking for someone with the following skills to help us with logistical support of the Cyber Security vulnerability management controls: •Excellent attention to detail in support of many different logistical needs. •Strong SharePoint Online...
-
Cyber Security Analyst
3 hours ago
Charlotte, United States Brookfield Renewable Full timeDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 megawatts of nonregulated renewable energy is seeking a Cyber Security Analyst to...
-
Cyber Security Analyst
Found in: Appcast Linkedin GBL C2 - 3 weeks ago
Charlotte, United States Deriva Energy Full timeDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 megawatts of nonregulated renewable energy is seeking a Cyber Security Analyst to...
-
Cyber Security Analyst
2 weeks ago
Charlotte, United States Deriva Energy Full timeDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 megawatts of nonregulated renewable energy is seeking a Cyber Security Analyst to...
-
Cyber Security Analyst
Found in: Appcast US C2 - 2 weeks ago
Charlotte, United States Deriva Energy Full timeDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 megawatts of nonregulated renewable energy is seeking a Cyber Security Analyst to...
-
Cyber Security Analyst
1 week ago
Charlotte, United States Brookfield Renewable Full timeDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 megawatts of nonregulated renewable energy is seeking a Cyber Security Analyst to...
-
Information Security Engineer
1 week ago
Charlotte, United States CareerBuilder Full timeDetails: W2 Candidates only. This is a 24-month contract opportunity to start with opportunity for contract extension and/or conversion to an internal employee. Contract/Consulting work is full-time, 40 hours/week Monday to Friday. Our client works on a hybrid schedule, on-site 3 days/week and once integrated with the team there is more flexibility for...
-
Information Security Engineer
5 days ago
Charlotte, United States Motion Recruitment Full timeDetails: You could be just the right applicant for this job Read all associated information and make sure to apply. W2 Candidates only. This is a 24-month contract opportunity to start with opportunity for contract extension and/or conversion to an internal employee. Contract/Consulting work is full-time, 40 hours/week Monday to Friday. Our client works on...
-
Information Security Engineer
Found in: Appcast US C2 - 2 weeks ago
Charlotte, United States Motion Recruitment Full timeDetails:W2 Candidates only.This is a 24-month contract opportunity to start with opportunity for contract extension and/or conversion to an internal employee.Contract/Consulting work is full-time, 40 hours/week Monday to Friday.Our client works on a hybrid schedule, on-site 3 days/week and once integrated with the team there is more flexibility for remote...
-
Information Security Engineer
2 weeks ago
Charlotte, United States Motion Recruitment Full timeDetails:W2 Candidates only.This is a 24-month contract opportunity to start with opportunity for contract extension and/or conversion to an internal employee.Contract/Consulting work is full-time, 40 hours/week Monday to Friday.Our client works on a hybrid schedule, on-site 3 days/week and once integrated with the team there is more flexibility for remote...
-
Information Security Engineer
Found in: Appcast Linkedin GBL C2 - 2 weeks ago
Charlotte, United States Motion Recruitment Full timeDetails:W2 Candidates only.This is a 24-month contract opportunity to start with opportunity for contract extension and/or conversion to an internal employee.Contract/Consulting work is full-time, 40 hours/week Monday to Friday.Our client works on a hybrid schedule, on-site 3 days/week and once integrated with the team there is more flexibility for remote...
-
Analyst, Security Operations Center
6 days ago
Charlotte, United States BrightSpeed Full timeBrightspeed Brightspeed brings you high-speed internet service without confusing bundles! View company page At Brightspeed, we are reimagining how people live, work, play and connect by providing fast, reliable internet connections and an awesome customer experience in twenty states throughout the Midwest and South. Backed by funds managed byApollo Global...