Security Analyst / Engineer role w/ USDA

Do you happen to be on the job market?  If so, this long-term position is in Fort Collins, CO, and relocation is included.  We offer a great benefits package (medical/dental/vision/401k/disability/etc.) and also a host of soft benefits (team family outings, holiday gatherings, sporting events, relaxed workstyle & attire, reasonable hours, etc.).  The job description is BELOW, and I’m available immediately if you’d like to learn more.

 

Also, if you know of someone else who might be interested, we do offer a finders’ fee for any referrals that we hire.  Have a great evening!

 

-Tyler

 

*** NOTE:  I’m not a robot, I did review your resume manually, and all responses come directly to me! ***

 

*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

 

POSITION SUMMARY:  SECURITY ANALYST / ENGINEER

 

Responsibilities:

• Analyze business, functional, and non-functional requirements to create technical design and unit test strategy documents.
• Design, test, and implement solutions based on requirements provided from the Enterprise Application Services, Office of the Chief Information Officer (OCIO), USDA
• Design artifacts that follow the technical standards and guidelines
• Work with staff to define solutions and implement those solutions according to the agreed upon design.
• Control deployment of HP “Source Code Analyzer”
• Review monthly and quarterly Retina and WebInspect scans and recommend technical solutions to mitigate vulnerabilities
• Actively transfer knowledge and mentor staff members on various aspects of system specific administration, configuration, and development

Required Skills:

• Experience collaboratively establishing secure configuration baselines for technologies such as Windows Server 2008 R2, or Red Hat Enterprise Linux Server 6.
• Experience securing Oracle database suites or MS SQL databases (not looking for someone who only has network skills).
• Experience performing IT product security specification reviews.
• Experience designing/reviewing architectures for adequate security such as secure authentication methods.
• Ability to use collaborative communication skills and establish productive working relationships.
• Experience with documentation reviews, including A&A packages
• Awareness of the diagnostic and mitigation aspects of Information Security Continuous Monitoring.
• Assists Information Systems Security Managers (ISSMs) in generating ATO package and continuous monitoring artifacts.
• Assists in documenting and managing artifacts in online SharePoint and CSAM security repositories.
• Knowledge of Risk Management Framework
• Knowledge of NIST, FISMA and other applicable guidance

Desired Skills:

• Implement security controls in appropriate information systems.
• Assess the effectiveness of the security controls once they have been implemented.
• Determine agency-level risk to the mission or business case.
• Authorize the information system for processing.
• Monitor the security controls on a continuous basis
• Implement security controls in appropriate information systems.