This listing was posted on ApplicantPool.
Information Assurance Engineer-Denver, CO-
Location:
Denver, CO
Description:
DirectViz Solutions, (DVS) is a rapidly growing government contractor that provides strategic services that meet mission IT needs for government customers. DVS is sourcing for an Information Assurance Engineer for a new opportunity. This position is based in Denver and/or Lakewood CO. This position requires a Public Trust investigation. There are 4 days of remote work per week . Information Assurance Engineer Duties: Incident Response Support incident response activities and maintain a set of Government furnished portable vulnerability assessment, digital media analysis, and malware analysis tools to support deployment missions, to be used for critical incident response efforts and in response to high priority initiatives. National Institute of Science and Technology Incident Response methodology. Cyber Security Incident Response Process implementation and ability to lead incident response activities Capability to perform system level forensics with applications such as Encase. Vulnerability Assessment Work with system owners and system administrators, to holistically examine the security architecture and vulnerabilities of their systems, through security scans, examination of system configuration, review of system design documentation, and interviews. Use network and vulnerability scanning tools, as well as invasive technologies used to interrogate systems for configuration and status. Ability to analyze and develop assessment reports from data produced by Scanning Tools (e.g., Imperva DB Scanner, Tenable Nessus Scanner, HCl Web app scans, Acunetix 360) . Ability to develop vulnerability assessment reports specific to the Department. Operate & Maintain SOC tools Provide security device signature maintenance and performance reports; maintain SIEM to collect and aggregate IDS/IPS data from network sensors, raw data from collection agents, firewalls, proxy servers, antivirus, vulnerability scanner elements and other security-relevant devices; enroll systems into the SIEM tool and perform asset categorization and prioritization; and install or modify network security elements, tools, and other systems. Ability to operate and maintain Vulnerability Management solutions (e.g., Tenable Nessus, Imperva DB, HCL Web App Scan, Acunetix 360) Ability to operate and maintain hardware asset management applications (e.g., Forescout, SolarWinds, or MDE Device Discovery). Ability to operate, maintain and process data from different types of vulnerability scanners: Web Application, Database, Host-based, Network Based. Monitoring & Analysis Actively review all SOC data feeds, analytical systems, sensor platforms, and output from other SOC tool products. Monitor systems status; escalate and report potential incidents; create and update incident cases and tickets; analyzing applying various antivirus, network and host-based intrusion detection, Digital Media Analysis (DMA), and vulnerability assessment tools, techniques and procedures; authoring and implementing custom detection content; tuning the SIEM and Intrusion Detection System/Intrusion Prevention System (IDS/IPS). Ability to monitor, analyze and report on alerts produced by Security tools (e.g., Network Intrusion Detection Systems (NIDS), Host Intrusion Detection Systems (HIDS), Data Loss Prevention Systems (DLP), Security Information and Event Management system (SIEM)). Ability to monitor and analyze alerts generated on Endpoint Detection and Response (EDR) solutions (e.g., Microsoft Defender for Endpoint (MDE)). Ability to monitor and process alerts generated by SIEM and SOAR (e.g., Splunk SIEM/SOAR solutions). Ability to develop summary reports based on security event analysis. Requirements: Federal Information Security Management Act (FISMA) Compliance framework, including ongoing assessment and authorization In-depth knowledge of the Appendix III, OMB Circular A-130 that details the IT system security measures for Federal IT systems for all agencies and departments of the Executive Branch of the Federal Government based upon the fundamental requirements of the Federal Information Security Management Act of 2002 and OMB A-130, Appendix III, and NIST Special Publication 800-37, Federal Guidelines for the Security Certification and Accreditation of Information Technology Systems and/or DOI guidance. Support Change Requests (CR) and security reviews to provide recommendations as the security subject matter expert to the Change Control Board (CCB). Strong background and experience with projects involving information assurance and cybersecurity. Strong communication skills and ability to brief senior leadership. 6. Familiarity with MS-Office automation products, including MS-Word, MS-Excel, MS-PowerPoint, and MS-Project. Familiarity working with Google products including Mail, Sites, Calendar, Spreadsheet, Drive, and Document. BS/BA (An academic degree in a closely related discipline (e.g., Computer Science, Information Security, Information Assurance, etc.) 6 years of experience US citizenship and ability to pass to obtain/pass a Public Trust investigation Security Operations Center (SOC) experience is preferred. Applicants may be required to show proof of a COVID-19 Vaccination Record Card to be eligible for employment at some work sites. DirectViz Solutions, LLC provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.
Company:
Directviz Solutions
Posted:
December 26 2023 on ApplicantPool
Visit Our Partner Website
This listing was posted on another website. Click here to open: Go to ApplicantPool
Important Safety Tips
- Always meet the employer in person.
- Avoid sharing sensitive personal and financial information.
- Avoid employment offers that require a deposit or investment.
To learn more, visit the Safety Center or click here to report this listing.
More About this Listing: Information Assurance Engineer-Denver, CO-
Information Assurance Engineer-Denver, CO- is a Engineering Engineer Job at Directviz Solutions located in Denver CO. Find other listings like Information Assurance Engineer-Denver, CO- by searching Oodle for Engineering Engineer Jobs.
Information Assurance Engineer-Denver, CO- is a Engineering Engineer Job at Directviz Solutions located in Denver CO. Find other listings like Information Assurance Engineer-Denver, CO- by searching Oodle for Engineering Engineer Jobs.