Information Systems Security AnalystLocation: Dahlgren, VirginiaType: ContractClearance: Active Secret Clearance needed to applyCompany Overview: Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees, we continually focus our attention on improving the overall work/life experience they have supporting the mission.
Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense.Benefits Overview: Cornerstone Defense offers a very comprehensive benefits package including, but not limited to: Medical, Dental and Vision Plans, Generous PTO Policy, 401(k), HSA and FSA options, Life and Disability Insurance, Tuition Reimbursement and Training, Perks at Work Discount Program, Referral Program, Leads Generation Program, CollegeAmerica 529, Fitness Reimbursement Program, Travel Assistance, Norton Lifelock Benefit Solutions, Life Planning Financial & Legal Services.Core Competencies:Cybersecurity principles, threats, vulnerabilities, and risk management processesEncryption algorithms (IPSEC, AES, GRE, IKE, MD5, SHA, 3DES)Data backup/recovery tools and disaster recovery planningHost/network access controls (ACLs)Incident response and intrusion detection methodologiesNetwork traffic analysis and protocols (TCP/IP, OSI, ITIL)System/application threats (buffer overflow, cross-site scripting, SQL injection)Security architecture and enterprise reference modelsNational/international cybersecurity laws, policies, and ethicsPenetration testing principles, tools, and techniquesTechnical Proficiency:Networking concepts, protocols, and security methodologiesSystem performance monitoring and ISO standardsSystem life cycle management, software security, usabilitySystem/server administration and engineering methodsServer/client operating systemsNetwork security architecture (topology, defense-in-depth)Network systems management toolsSystem administration, network, and OS hardening techniquesCloud computing models (SaaS, IaaS, PaaS) and cloud security strategiesData security standards (PII, PCI, PHI)Leadership & Management:Information security and project management principlesResource management techniquesRisk assessment and mitigation processesSecure acquisitions, procurement, and supply chain risk managementIT supply chain security and compliance with laws, directives, and guidelinesOrganizational risk tolerance and management approachesCritical IT procurement requirements