Senior Information Security Analyst

6 months ago

Columbia, United States AutomotoSocial Full time

JOIN OUR WINNING TEAM AS A SENIOR INFORMATION SECURITY ANALYST

AT CARFAX WE ARE CONSTANTLY EXPANDING OUR PRODUCT AND TECHNOLOGY OFFERINGS  This means we are continually bringing new, innovative products to market through exciting technology initiatives to help our customers.  Come join the success in Biz Tech. As a Senior Information Security Analyst, you will be responsible for guiding technical teams in building secure products in a DevOps model. The position is targeted to enable better security as part of the software development lifecycle through simple and automated tools that are easily integrated into a developer's workflow. See if you have what it takes to join Team CARFAX   

THE TECH CULTURE AT CARFAX CULTURE Having a creative and innovative environment where our developers can collaborate, learn and grow is something CARFAX is passionate about. We have an entire floor dedicated to our techies, designed specifically to enable teams to dream big and produce the best. Along with creating and maintaining awesome software you’ll also be able to participate in our quarterly Hack-a-thon’s or take a break by kicking back and playing the latest game on x-box when you need to re-boot the mind. Oh, and do you happen to have a dog? CARFAX is dog-friendly and no day goes by where you don’t have the chance to visit with one of the visiting pups. We even provide the dog beds, bowls and of course, toys

AS A SENIOR INFORMATION SECURITY ANALYST, YOU WILL:

  • Technical point of contact for product teams as it relates to automation, CI/CD, and DevSecOps
  • Build tools and automation scripts that enable CARFAX developers to easily consume security services
  • Improve the accessibility of security through automation, continuous integration pipelines, and other means
  • Evaluate and recommend products and services across the corporate security technology stack
  • Research and advises on secure Cloud architecture designs to best practice
  • Work with teams to identify threats and vulnerabilities by performing threat assessments
  • Develop technical assessments for new technologies, 3rd party integration initiatives and provide technical support to facilitate compliance with security policies
  • Develop hardened operating baselines utilizing industry standards and best practice
  • Develop secure coding guidelines for personnel and provide security awareness and technical training as required
  • Perform and/or analyze vulnerability scans and penetration tests to direct other parties in properly mitigating vulnerabilities
  • Security incident response technical lead, performs forensic investigations to determine root causes and determine appropriate security response actions

QUALIFICATIONS:

  • Bachelor's degree in computer science/related technical field or equivalent experience
  • 6+ years of experience developing secure software products using TDD/Agile/XP/Lean methods
  • Background in developing and release of software products in cloud, ecommerce and mobile environments
  • Experience in various development tools, such as Jenkins, GitHub
  • Comfortable with scripting languages, such as Python, Perl, PowerShell or others
  • Familiar with common APPLICATION STACK technologies (e.g., HTTP, HTML5, AJAX, REST, JSON, etc.) and PLATFORMS (e.g., AWS, ReactJS, AngularJS, JAVA, Spring Boot, MySQL, MongoDB, Hadoop, iOS, Android, etc.)
  • Familiar with containers and container management platforms including Kubernetes
  • Working knowledge of core CRYPTOGRAPHY concepts (Encryption, Key Storage, Hashing, Crypto Libraries, etc.) and how they are applied and attacked in applications
  • Hands-on experience with port and network scanners (Nessus, Nexpose, Nmap)
  • Experience with web application scanners (Netsparker) and SAST/DAST testing platforms including Veracode
  • Experience working with leading firewall, network scanning and intrusion detection products and authentication technologies (Cisco ASA Firepower, F5 ASM, Sourcefire, Okta, etc.)
  • Experience working with logging, alerting and file integrity monitoring tools
  • Deep knowledge of common application vulnerabilities, current threat vectors and mitigations.
  • Knowledge of IP protocols, networks, security architectures and security threats in an IP network
  • Familiarity with IT security standards, compliance regulations and best practice frameworks (ISO 27001, ISO 27002, NIST, OWASP, SANS, SOX, ITIL, PCI DSS)
  • Any of these preferred security certifications (CISSP, CSSLP, CEH, GSSP, GWEB)

ABOUT CARFAX

CARFAX, a unit of IHS Markit (Nasdaq: INFO), helps millions of people every day confidently shop, buy, own and sell used cars with innovative solutions powered by Carfax vehicle history information. The expert in vehicle history since 1984, Carfax provides exclusive services like Carfax Used Car Listings, MyCARFAX, Carfax History-Based Value and the flagship Carfax® Vehicle History Report™ to consumers and the automotive industry. Carfax owns the world's largest vehicle history database and is a nationally recognized top workplace by The Washington Post and Glassdoor.com. Shop, Buy, Own, Sell – Show me the Carfax™. Based inLondon, IHS Markit is a world leader in critical information, analytics and solutions.

  • Information Security Analyst

    3 weeks ago

    Columbia, United States Fathom Management LLC Full time

    Information Security Analyst Seeking an experienced Information Security Analyst. The analyst will ensure the rigorous application of cybersecurity policies, principles, and practices in the delivery of all Information Technology (IT) and cybersecurity services. The analyst will develop and designs security solutions to maintain confidentiality, integrity,...

  • Information Security Analyst

    2 days ago

    Columbia, United States Dobbs Defense Solutions, LLC Full time

    Our Mission At Dobbs Defense, we deliver mission-centric IT, Cyber, and data analytics solutions for our government and commercial clients through the convergence of automation, innovation, training, and education. Delivering high-quality IT, cybersecurity, and data analytics solutions through proven and innovative methods is our vision.Job Description ...

  • Security Analyst

    2 weeks ago

    columbia, United States System Soft Technologies Full time

    Job Description – Security AnalystSystem Soft Technologies is a premier technology company providing exceptional consulting services and solutions that drive innovation, enhance business value, and boost competitiveness. For over 25 years, we have built trusted partnerships with our clients, helping us grow into a $200MM+ enterprise. With the collective...

  • Security Analyst

    2 weeks ago

    columbia, United States System Soft Technologies Full time

    Job Description – Security AnalystSystem Soft Technologies is a premier technology company providing exceptional consulting services and solutions that drive innovation, enhance business value, and boost competitiveness. For over 25 years, we have built trusted partnerships with our clients, helping us grow into a $200MM+ enterprise. With the collective...

  • Security Analyst

    3 weeks ago

    Columbia, United States System Soft Technologies Full time

    Job Description – Security AnalystSystem Soft Technologies is a premier technology company providing exceptional consulting services and solutions that drive innovation, enhance business value, and boost competitiveness. For over 25 years, we have built trusted partnerships with our clients, helping us grow into a $200MM+ enterprise. With the collective...

  • Security Analyst

    2 weeks ago

    columbia, United States Rose International Full time

    Date Posted: 11/06/2024Hiring Organization: Rose InternationalPosition Number: 473971Job Title: Security AnalystJob Location: Columbia, SC, USA, 29203Work Model: OnsiteEmployment Type: TemporaryEstimated Duration (In months): 13Min Hourly Rate($): 77.00Max Hourly Rate($): 78.00Must Have Skills/Attributes: Cloud, Microsoft Office, SDLC, SQL, Windows Server...

  • Security Analyst

    2 weeks ago

    Columbia, United States Rose International Full time

    Date Posted: 11/06/2024Hiring Organization: Rose InternationalPosition Number: 473971Job Title: Security AnalystJob Location: Columbia, SC, USA, 29203Work Model: OnsiteEmployment Type: TemporaryEstimated Duration (In months): 13Min Hourly Rate($): 77.00Max Hourly Rate($): 78.00Must Have Skills/Attributes: Cloud, Microsoft Office, SDLC, SQL, Windows Server...

  • Security Analyst

    2 weeks ago

    Columbia, United States Rose International Full time

    Date Posted: 11/06/2024Hiring Organization: Rose InternationalPosition Number: 473971Job Title: Security AnalystJob Location: Columbia, SC, USA, 29203Work Model: OnsiteEmployment Type: TemporaryEstimated Duration (In months): 13Min Hourly Rate($): 77.00Max Hourly Rate($): 78.00Must Have Skills/Attributes: Cloud, Microsoft Office, SDLC, SQL, Windows Server...

  • Senior Technical Analyst Position

    4 weeks ago

    Columbia, Maryland, United States TIER 1 CONSULTING GROUP Full time

    Job Title: Senior Technical Analyst PositionJob Description: We are seeking a skilled Senior Technical Analyst to join our team at TIER 1 CONSULTING GROUP. As a Senior Technical Analyst, you will be responsible for developing full stack applications using popular technologies such as Golang, Docker, and Kubernetes.Key Responsibilities:* Develop full stack...

  • IT Security Compliance Analyst

    4 weeks ago

    Columbia, United States CARFAX Full time

    Description Join Team CARFAX as an IT Security Compliance Analyst The IT Security Compliance Analyst is responsible for ensuring that the organization’s information systems and practices comply with applicable regulatory requirements, industry standards, and internal policies. This role involves assessing security controls, evaluating risk,...

  • Senior Information Systems Security Officer

    4 weeks ago

    Columbia, Maryland, United States Leidos Full time

    About the Role:We are seeking an experienced Senior Information Systems Security Officer to join our team at Leidos. As a key member of our National Security Sector, you will be responsible for providing aid to the program, organization, system, or enclave's information assurance program.Key Responsibilities:Provides aid to the program, organization, system,...

  • 85 Security Analyst

    4 months ago

    Columbia, United States Focused HR Solutions Remote Work Freelance Full time $60 - $80

    This job is 100% on-site in Columbia, SCOur direct client has an opening for a Security Analyst 10965-1This position is up to 12 months, with the option of extension, and is in Columbia, SCCorp to Corps are NOT allowed for this client. W2 Only.DAILY DUTIES / RESPONSIBILITIES:The Security Analyst is primarily responsible for assessing and evaluating the...

  • Journeyman Information Security Analyst

    3 weeks ago

    Columbia, United States Synergy ECP Full time

    SPYROS Information & Technology Consulting, a wholly owned subsidiary of Synergy ECP. is a Service-Disabled Veteran Owned Small Business (SDVOSB), headquartered in the Baltimore-Washington corridor, established to provide unique and exceptional services to our clients in the government and national defense sectors. SPYROS specializes in providing highly...

  • Security Analyst

    2 weeks ago

    Columbia, SC, United States System Soft Technologies Full time

    Job Description – Security AnalystSystem Soft Technologies is a premier technology company providing exceptional consulting services and solutions that drive innovation, enhance business value, and boost competitiveness. For over 25 years, we have built trusted partnerships with our clients, helping us grow into a $200MM+ enterprise. With the collective...

  • Security Analyst Position

    1 month ago

    Columbia, South Carolina, United States Focused HR Solutions Full time

    Job Title: Security Analyst PositionWe are seeking a highly skilled Security Analyst to join our team at Focused HR Solutions. As a Security Analyst, you will play a critical role in securing our cloud infrastructure and performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities.Key Responsibilities:Perform threat...

  • Senior FOIA Analyst

    4 weeks ago

    Columbia, Maryland, United States DigiFlight Full time

    Job DescriptionJob Title: Senior FOIA AnalystJob Summary: We are seeking a highly skilled Senior FOIA Analyst to join our team at DigiFlight. As a Senior FOIA Analyst, you will be responsible for responding to public and official requests for review and release of classified and/or sensitive customer information under the FOIA, PA, or E.O. 13526 Mandatory...

  • 83-Security Analyst

    3 weeks ago

    Columbia, United States Focused HR Solutions Full time

    100% on site.Our direct client has an opening for an Security Analyst 11299-1.This position is up to 12 months, with the option of extension, and is in the following locations in.Please send your rate and resume. W2 only.PREFERRED EDUCATION/CERTIFICATIONS:Bachelor's in a related area or 10+ years of experience in the field or in a related area.Rate...

  • Senior Information Systems Security Officer

    2 weeks ago

    columbia, United States RICEFW Technologies Inc Full time

    The Senior ISSO will report directly to the Security Risk and Compliance Manager within the Office of Cybersecurity (OCS) and act as a seasoned cybersecurity consultant. This role will involve advising SCDHHS leadership, business units, business partners, and vendors on matters related to cybersecurity and compliance.Key Responsibilities:Security Program...

  • Senior Information Systems Security Officer

    2 weeks ago

    Columbia, United States RICEFW Technologies Inc Full time

    The Senior ISSO will report directly to the Security Risk and Compliance Manager within the Office of Cybersecurity (OCS) and act as a seasoned cybersecurity consultant. This role will involve advising SCDHHS leadership, business units, business partners, and vendors on matters related to cybersecurity and compliance.Key Responsibilities:Security Program...

  • Joint Target Intelligence Analyst

    6 months ago

    Columbia, United States Global Dimensions, LLC Full time

    Global Dimensions is a HUBZone, service disabled, veteran-owned small business based in Fredericksburg, VA. We are a dynamic, expanding company with exciting opportunities in language/culture, training/education/instruction, IT, cyber security, and intelligence (analysts, CI, HUMINT, SIGINT, etc.). Global Dimensions is currently seeking a Senior Joint Target...