Information Systems Security Analyst

Title: Information Systems Security AnalystLocation: Dahlgren, VA*Clearance: Active Secret Clearance needed to applyCompany OverviewCornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we continually focus our attention on improving the overall work/life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense.Benefits OverviewMedical, Dental and Vision PlansGenerous PTO Policy401(k)HSA and FSA optionsLife and Disability InsuranceTuition Reimbursement and TrainingPerks at Work Discount ProgramReferral ProgramLeads Generation ProgramCollegeAmerica 529Fitness Reimbursement ProgramTravel AssistanceNorton Lifelock Benefit SolutionsLife Planning Financial & Legal ServicesExperience RequirementFour (4) years of experience in Cybersecurity.Core CompetenciesCybersecurity principles, threats, vulnerabilities, and risk management processesEncryption algorithms (IPSEC, AES, GRE, IKE, MD5, SHA, 3DES)Data backup/recovery tools and disaster recovery planningHost/network access controls (ACLs)Incident response and intrusion detection methodologiesNetwork traffic analysis and protocols (TCP/IP, OSI, ITIL)System/application threats (buffer overflow, cross-site scripting, SQL injection)Security architecture and enterprise reference modelsNational/international cybersecurity laws, policies, and ethicsPenetration testing principles, tools, and techniquesTechnical ProficiencyNetworking concepts, protocols, and security methodologiesSystem performance monitoring and ISO standardsSystem life cycle management, software security, usabilitySystem/server administration and engineering methodsServer/client operating systemsNetwork security architecture (topology, defense-in-depth)Network systems management toolsSystem administration, network, and OS hardening techniquesCloud computing models (SaaS, IaaS, PaaS) and cloud security strategiesData security standards (PII, PCI, PHI)Leadership & ManagementInformation security and project management principlesResource management techniquesRisk assessment and mitigation processesSecure acquisitions, procurement, and supply chain risk managementIT supply chain security and compliance with laws, directives, and guidelinesOrganizational risk tolerance and management approachesCritical IT procurement requirementsJ-18808-Ljbffr