Security Analyst - Incident Management, Application & infrastructure testing

Company: Software Management Consultants, Inc.
Location: Los Angeles
Posted on: November 23, 2020

Job Description:

Job Description SMCI is seeking an Information Security Analyst (Incident Management) to investigate and identify patterns of continued technical security issues and weaknesses and design solutions to prevent future reoccurrences. Advise internal lines of business and IT partners parties on how to remediate technical security issues and verify remediation activities. Responsible for in-depth technical security testing of company websites, infrastructure, and applications using a combination of automated manual commercial open-source tools. Responsible for Technical and Executive level reports on technical security issues. Design, document, and implement technical information security processes, procedures, guidelines, and solutions. Function as primary incident response handler directing IT and other departments during security incidents, including evidence preservation, corrective action, and preventive actions. Aid in the implementation, maintenance, and monitoring of the information security program into in-scope operational areas (gap analysis, risk assessment, third party assessments, procedurespecification development, execution of recurring procedures, incident response) Align with and support the execution of the Information Security Program vision and strategy Meet with project teams and other system architects to develop system designs and project plans that include the appropriate security controls and meet security standards Qualifications One or more of the following certifications strongly preferred CEH (Certified Ethical Hacker) or equivalent webapplication security testing qualification CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) ITSecurity Vendor Certifications (e.g. Cisco, Microsoft, RSA) Forensic experience or certification (EnCE and ACE) GIAC GSEC (Global Information Assurance Certification Security Expert) GIAC GCIA (Global Information Assurance Certification Certified Intrusion Analyst) GIAC GCIH (Global Information Assurance Certification Certified Incident Handler) Total experience typically 5 years in an Information Security position with the following minimums Three years of application security testing vulnerability testing Two years of experience in secure software development Two years of hands-on Unix experience Two years of hands-on infrastructure security Understanding of emerging technologies in IT such as Cloud Platforms and Mobile as well as the associated security risks. Working knowledge of common information technology management frameworks such as ISOIEC 27001, ITIL, COBIT, and NIST, as well as audit and SOC2 experience a huge plus. Required Skills IUCTURE, APPLICATION SECURITY O365 ISOIEC 27001, ITIL, COBIT, NIST UNIX INFRASTRUCTURE SECURITY CLOUD MOBILE APPLICATION INFRASTRUCTURE SECURITY VULERABILITY TESTING GAP ANALYSIS, RISK ASSESSMENT. Don't hesitate Submit your resume today. SMCI is an EEO employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, national origin, disability, age, genetic information, marital status, military, and veteran status. Members of minority groups, Vietnam Era Veterans and individuals with mental or physical disabilities are encouraged to contact us regarding employment opportunities. In addition, in order to support the provision of business to minority-owned and Women-owned businesses (MWBE), such MWBE are encouraged to contact us regarding subcontracting business opportunities with our firm. (No third parties, please) (H1 sponsorship currently unavailable) (Local candidates only, please)

Keywords: Software Management Consultants, Inc., Los Angeles , Security Analyst - Incident Management, Application & infrastructure testing, Other , Los Angeles, California