Senior Information Security Specialist

4 weeks ago


Denver, United States Arrow Alliance Industries, LLC Full time

Job Title:SENIOR INFORMATION SECURITY SPECIALISTCompany:

Arrow Alliance Industries, LLC (Norman, OK)Location(s):Washington, DC or Lakewood, CO

Job Description:

The contractor shall bring extensive knowledge and experience in delivering security administration support to the data center which includes incident reporting, planning, standards compliance, platform configuration management, cyber security vulnerability tracking (to include coordinating with customers and creating artifacts showing compliance), and the secure user access and management processes for the NPS Enterprise Data Centers.The Senior Information Security Specialist shall have experience creating and submitting an Assessment & Authorizations (A&A) package and all related documents.The Senior Information Security Specialist must have knowledge of hybrid (on-premise & cloud) data center environments to include evaluation and guidance on security control implementation on network, storage, server (Windows, Linux, Oracle) and platform (Microsoft Hyper-V and Azure Preferred).Responsibilities:Responsible for the mapping and implementation of the necessary defined security controls as they relate to the current client infrastructure on client owned devices in accordance with government identified General Support Systems (GSS) and SubsystemsDevelop, implement and maintain security related documents to include:System Security Plans (SSP)Risk AssessmentsRisk Acceptance documentationSecurity Impact AnalysesContingency PlansIncident Response PlansPlan of Actions & Milestones (POA&M)Independent Security Assessment (ISA)Memorandum of Understanding (MOU)Service Level Agreements (SLA)Assessment & Authorizations (A&A)Provide input to auditors, to include providing artifacts to support current configurationsAssess existing systems, applications, tools in addition to existing security processes for security implications and recommend improvements to strengthen security posture based on assessmentConduct continuous monitoring to include maintenance of current ATO, monitoring compliance, conducting assessments, conducting periodic scans, auditing events and review of audit logs, ensuring media is properly secured before transit or sanitized before disposalProvide recommendations to the NPS on methods to minimize security impacts of new requirements, technologies in accordance with policies, federal laws & mandates.Develop, communicate, and enforce security policies, procedures and safeguards for all systems and staff, based upon Data Center and other government standards.

Education, Experience, Skills:7+ years of broad work experience including administration, engineering, and security.5+ years of experience in network and system design, access control and implementation3+ years of experience supporting the administration of the NIST Risk Management Framework (SP 800-37) and the planning and implementation of security controls IAW NIST SP 800-53.Experience assessing and hardening security configurations for operating systems, applications, and services.In-Depth knowledge of TCP/IP addressing and standards including network design, firewall configuration, load balancing, remote access, strong authentication, vulnerability scanning, VPN and DMZ managementUnderstanding of scripting languages and technologies such as shell scripting, Perl, JavaScript, VBScript, or othersTechnical knowledge and experience with application security, content filtering, network protocols, access control, encryption, and 2 factor authentication technologiesUnderstanding of common security protocols such as Kerberos, RADIUS, RSA, TACACS+, SSL, TLS, SSH, IPsec, S/MIME, PKI and SFTPIn addition, the successful candidate will:

Be able to separate fact from opinion and speculation.Have excellent work prioritization, planning, and organizational skills.Interact effectively with vulnerability reporters, system and network administrators, vendors, experts, Internet users, sponsors, policy makers, managers, and staff (i.e., stakeholders in the vulnerability disclosure process)Be able to work with closely coordinated team during emergencies.Have excellent analytical, reasoning, and creative problem-solving skills.Have excellent written, oral communication skills.Recognize and deal appropriately with confidential and sensitive information.Be able to work meticulously with careful attention to detail.Be able to collaborate effectively and work closely within a coordinated team environment.Be able to quickly learn new procedures, techniques, and approaches.Maintain composure while dealing with difficult people.Communicate and work effectively under normal and stressful situations.Be motivated and able to meet inflexible deadlines.Possess strong leadership and mentoring abilities.Be motivated to tackle challenging problems.

#J-18808-Ljbffr



  • Denver, United States Apex Systems Full time

    Description: Bank of American IT Security Specialist Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Researches more advanced and complex attempts/efforts to compromise security protocols. Typically has 3-5+ years of relevant experience and will act...


  • Denver, United States Apex Systems Full time

    Description: Bank of American IT Security Specialist Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Researches more advanced and complex attempts/efforts to compromise security protocols. Typically has 3-5+ years of relevant experience and will act...


  • Denver, United States Apex Systems Full time

    Description: Bank of American IT Security Specialist Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Researches more advanced and complex attempts/efforts to compromise security protocols. Typically has 3-5+ years of relevant experience and will act...


  • Denver, United States Apex Systems Full time

    Description: Bank of American IT Security Specialist Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Researches more advanced and complex attempts/efforts to compromise security protocols. Typically has 3-5+ years of relevant experience and will act...


  • Denver, United States Bank of America Full time

    Job Description:The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting a group/team to develop a deep understanding of the business in order to...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting a group/team to develop a deep understanding of the business in order to...


  • Denver, Colorado, United States Department Of Energy Full time

    Summary This position is part of the Department of Energy (DOE), Office of Intelligence and Counterintelligence. As an Information Technology Specialist supporting the DOE Counterintelligence (CI) mission, you will provide information technology (IT) expertise to DOE CI mission activities, including investigations, awareness, analysis, insider threat, cyber...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, United States Hispanic Technology Executive Council Full time

    At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, United States Apex Informatics Full time

    Job DescriptionJob Description*Candidate MUST be local to Colorado**8 years of information technology experience, *3 years of which in information security or information assurance The current Colorado Department of Education (CDE) identity management system was implemented the Oracle Identity Management Suite. The software components include:· Oracle...


  • Denver, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Denver, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit...


  • Denver, Colorado, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit systems, thus protecting America's transportation infrastructure and...


  • Denver, Colorado, United States Bank of America Full time

    Job Description:The Information Security Engineer will lead strategic security efforts to expand technology offerings within the Merchant and Small Business technology portfolio. This role will work across various security and technology teams to define, drive, and deliver major security components to meet program objectives. Knowledge and experience with...