cyber security analyst

Now Foods

<div>
 Job Details
 <br/>
 <br/>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The Senior Security Analyst position will provide security strategies, implement security initiatives, and respond to security incidents. This position helps design, implement, manage, and monitor technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of NHG&rsquo;s information assets. The Senior Security Analyst will serve as a trusted authority on cybersecurity practices, policies, and technologies, acting as a liaison between IT and business teams to balance organizational security needs with operational efficiency.
 <br/>
 <br/>
 <strong>
  ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned.
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Collaborate with the Security team, IT Leaders, organizational stakeholders, and the Head of IT in the development and execution of Information Security strategies.
  </li>
  <li>
   Protect NOW Health Group&rsquo;s on-premises and Coud systems, networks, and applications against all security breaches.
  </li>
  <li>
   Act as a technical point of contact during security incidents.
  </li>
  <li>
   Contain, investigate, remediate, and document information security incidents.
  </li>
  <li>
   Research threat actors, tactics, techniques, procedures, malware, and other Indicators of Compromise (IoC).
  </li>
  <li>
   Assess, monitor, and report IT vulnerabilities.
  </li>
  <li>
   Prepare and analyze security reports to identify trends and drive secure behaviors throughout the organization.
  </li>
  <li>
   Perform forensic analysis.
  </li>
  <li>
   Assist in developing security standards, policies, and procedures for NOW Health Group.
  </li>
  <li>
   Participate in management and implementation of IT projects and help deliver them on time, on budget and according to required specifications.
  </li>
  <li>
   Stay up to date on latest security technologies, techniques, vendors, and make recommendations to enhance the cybersecurity posture of the company.
  </li>
  <li>
   Provide mentorship and training to Security and IT Teams.
  </li>
  <li>
   Some after-hours and on-call support will be required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  SAFETY RESPONSIBILITY STATEMENT
  <br/>
  <br/>
 </strong>
 Supports a culture of safety; follows all workplace health and safety procedures. Responsible for safety performance in respective area. Ensures the implementation of, adherence to, and enforcement of workplace health and safety requirements. Ensures activities are completed to promote and enforce safe behaviors by supervisors and employees. Ensures injury prevention efforts are effectively implemented. Fulfills responsibilities as outlined in the company safety management plan.
 <br/>
 <br/>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.
 <br/>
 <br/>
 <ul>
  <li>
   Minimum 10 years of security-specific work experience.
  </li>
  <li>
   Hands-on experience with security technologies including SIEM, IDPs, EDR software, proxies, and firewalls.
  </li>
  <li>
   Knowledge of penetration testing, network security, patch management, and the techniques used to expose and correct security flaws.
  </li>
  <li>
   Proficiency with the MITRE ATT&amp;CK framework and threat intelligence applications.
  </li>
  <li>
   The ability to identify and spotlight vulnerabilities in on-premises and remote networks, remediate problems, and prevent security breaches.
  </li>
  <li>
   Experience with threat-led penetration testing, attack simulation, and red/blue team exercises.
  </li>
  <li>
   Experience managing a ticket queue, working on multiple issues at once, while providing regular updates to customers, leadership, and teammates.
  </li>
  <li>
   Experience with network monitoring and management tools, including network analyzers.
  </li>
  <li>
   A strong focus on attention to detail, timely delivery, and satisfying user requirements.
  </li>
  <li>
   Develop and maintain relationships with key business areas and platform owners to provide ongoing assurance, helping to identify security risks in applications.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  EDUCATION And/or EXPERIENCE
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree from four-year college or university; and at least nine years of related cybersecurity experience and/or training; or equivalent combination of education and experience.
  </li>
  <li>
   Must have at least one of the following certifications: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CompTIA Advanced Security Practitioner (CASP+).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Language Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Good oral and written communication skills.
  </li>
  <li>
   Ability to effectively respond to requests, present information, and drive adoption of Security practices across the organization.
  </li>
  <li>
   Ability to read, analyze, apply and improve technical SOPs.
  </li>
  <li>
   Ability to read and interpret documents such as procedure manuals, professional journals, operating and maintenance instructions, and safety rules.
  </li>
  <li>
   Strong ability to create detailed documentation to drive efficiency of operations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  REASONING ABILITY
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Soft skills such as analytical thinking, problem-solving, attention to detail, critical thinking, and data driven analysis.
  </li>
  <li>
   Sound decision making and trouble-shooting ability with an aptitude for solving difficult problems using creative solutions.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  PHYSICAL DEMANDS
  <br/>
  <br/>
 </strong>
 The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <br/>
 <br/>
 <strong>
  WORK ENVIRONMENT
  <br/>
  <br/>
 </strong>
 The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
</div>


SR CYBER SECURITY ANALYST

Scientific Research Corporation

<div>Description:
<div>
SRC has been tasked with analyzing existing OpenShift cluster deployments and designing solutions to address identified shortcomings. The team is in need of a mid-level cyber security engineer with knowledge and experience in selecting, applying, and validating technical security controls in Linux, database, and web server software.</div><div></div><div><br>
The ideal candidate must be able to work autonomously and think through technical problems without the input or influence of others. The position requires technical experience and expertise and a proven history of problem solving and solution implementation. Day-to-day activities include:</div><ul><li>
Understanding existing technical requirements and customer needs</li><li>
Identifying security requirements and selecting the most effective and efficient means to meet those requirements</li><li>
Creating Ansible automation content to reduce the time it takes to apply security settings</li><li>
Authoring technical documentation to support requests for approval to operate on target networks</li><li>
Providing technical support for deployed systems, identifying issue patterns, and designing solutions to reduce production downtime</li><li>
Identifying new technology patterns and proposing updates to existing systems to take advantage of technology improvements</li></ul><p><i>
#LI-AM1</i></p>
Requirements:
<ul><li>Top Secret clearance required to start</li><li>
At least two years of experience in the design, testing, and implementation of technical security controls in IT systems</li><li>
Two or more years of experience selecting, applying, and testing security controls with the following technologies:<ul><li>
Enterprise Linux (RHEL, Rocky, CentOS)</li><li>
MariaDB/MySQL databases</li><li>
Apache HTTPd and/or nginx web servers</li></ul></li><li>
Risk Management Framework (RMF) experience preferred</li></ul>
Desired Skills:
<ul><li>With little supervision, design and develop solutions for the automated application of technical security controls on various IT products</li><li>
Analyze problem sets, perform risk assessments of existing environments, and propose solutions for reducing risk and addressing identified pain points</li><li>
Draft and validate technical documentation to support the approval to operate IT systems on target networks. This includes understanding the documentation requirements and process workflows associated with DoD networks and systems</li></ul>
Clearance Information:
<p><b>
SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET LEVEL</b></p>
Travel Requirements:
<ul><li>Minimal travel required</li></ul>
About Us:
<p>
Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.</p><p></p><p><br>
SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.</p>
EEO:
<div>
Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.</div><div>
All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.</div><div></div><div><br>
Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.</div></div>

Cyber Security Analyst II

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a remote Cyber Threat Analyst to support the US Courts. This position will be within United States and will be fully remote.
</div>Responsibilities:
<div>
The Threat Intel Analyst will use their expert knowledge of malicious software to research and analyze cyber threats, report their findings, use their intelligence to predict similar attacks, and help to counter the activities of cybercriminals for the organization.</div><div></div><div><br>
Job duties include:</div><ul><li>
Conduct cyber threat analysis, identify mitigation and/or remediation courses of action; develop actionable intelligence used to protect organizational IT assets</li><li>
Utilize Threat Intelligence and Threat Models to create threat hypotheses</li><li>
Prepare and report risk analysis and threat findings</li><li>
Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation</li><li>
Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise</li><li>
Proactively and iteratively search through systems and networks to detect advanced threats</li><li>
Analyze host, network, and application logs in addition to malware and code</li><li>
Identify, track and investigate high priority threat campaigns, malicious actors with the interest, capability and TTPs (Techniques, Tactics and Procedures)</li><li>
Bring a comprehensive understanding, analyzing and tracking the cyber threat landscape, including identifying and analyzing cyber threats actors, APT TTPs and/or activities to enhance cybersecurity posture of the IT operating environment</li><li>
Implement defined procedures for remediation, or make an informed decision to escalate</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber threat analysis experience (or commensurate experience)</li><li><div>
The candidate should have at minimum ONE of the following certifications:</div><ul><li>
Certified Information System Security Professional (CISSP).</li><li>
SANS - GCIA Intrusion Analyst</li><li>
SANS - GREM Reverse Engineering Malware</li><li>
SANS - GISF Security Fundamentals SANS - GXPN Exploit Researcher and Advanced Penetration Tester</li><li>
SANS - GMON Continuous Monitoring Certification</li><li>
OSCP (Certified Professional)</li><li>
OSCE (Certified Expert)</li><li>
OSWP (Wireless Professional)</li><li>
OSEE (Exploitation Expert)</li><li>
CCSP Certified Cloud Security Professional</li><li>
LPT Licensed Penetration Tester</li><li>
ECSA EC-Council Certified Security Analyst</li></ul></li></ul><div><b><br>
Clearance Required:</b> Must be able to attain and maintain an AOUSC Public Trust</div>
Posted Salary Range: USD $108,310.00 - USD $160,000.00 /Yr.</div>

Cyber Threat Analyst

News Corp

<div><div><p><b>Job Description :</b></p>
<p><b>Governance, Risk and Compliance (GRC) Analyst</b></p>
<p><b>Location - Austin Texas</b></p>
<p><b>Hybrid - 3 Days in office</b></p>
<p><b>The Governance, Risk and Compliance (GRC) Analyst will have a good understanding of</b></p>
<p><b>security and privacy principles as well as a sound understanding of regulatory and</b></p>
<p><b>compliance requirements affecting a US business.</b></p>
<p><b>As a GRC analyst your roles will support and maintain the Realtor.com Cyber GRC Program</b></p>
<p><b>along with the BISO and central GRC function, including the development, implementation</b></p>
<p><b>and maintenance of cyber security policies, standards, guidelines and processes to ensure</b></p>
<p><b>compliance is maintained and risk is managed.</b></p>
<p><b>What&rsquo;s the role?</b></p>
<ul><li><b>Work with key internal and external stakeholders to ensure compliance with PCI</b></li></ul>
<p><b>DSS, Privacy and GDPR compliance requirements, audits and assessments.</b></p>
<ul><li><b>Assist in the risk assessment process and report on enterprise-wide and third-party</b></li></ul>
<p><b>security controls</b></p>
<ul><li><b>Support in the implementation of key security initiatives across the organisation</b></li></ul>
<ul><li><b>Support management of audits, external assessments and assurance processes</b></li></ul>
<p><b>including, but not limited to PCI DSS and NIST CSF</b></p>
<ul><li><b>Develop and manage meaningful metrics to measure and track cyber risks and the</b></li></ul>
<p><b>effectiveness of the governance, risk and compliance function</b></p>
<ul><li><b>Conduct compliance readiness assessments and assurance activities against</b></li></ul>
<p><b>policies, standards requirements</b></p>
<ul><li><b>Track technology and cyber related audit findings and actions</b></li></ul>
<ul><li><b>Assist with the development of measurable cyber security standards that align with</b></li></ul>
<p><b>policy control objectives</b></p>
<ul><li><b>Support user and specialist user education and awareness exercises for employees</b></li></ul>
<ul><li><b>Assist in the development of effective measurement and simplified reporting of cyber</b></li></ul>
<p><b>security risks within the business</b></p>
<ul><li><b>Assist with third party security assessments against industry standards as well as</b></li></ul>
<p><b>News UK control standards</b></p>
<ul><li><b>Assist in maintaining the cyber security risk register</b></li></ul>
<p><b>Who are you?</b></p>
<ul><li><b>3+ years&rsquo; experience within Cyber Security or related fields</b></li></ul>
<ul><li><b>Demonstrated experience in governance, risk and compliance in dynamic and</b></li></ul>
<p><b>complex cyber security, technology and business environment</b></p>
<ul><li><b>Strong knowledge and experience with Industry Frameworks and Standards such as</b></li></ul>
<p><b>NIST CSF, PCI DSS and ISO 27001</b></p>
<ul><li><b>Good working knowledge of Cloud infrastructure, especially AWS</b></li></ul>
<ul><li><b>Previous experience working in a SOX compliance environment is desirable</b></li></ul>
<ul><li><b>Strong oral and written communication skills</b></li></ul>
<ul><li><b>Qualification in Information Security, Computer Science, Engineering or similar</b></li></ul>
<ul><li><b>Professional security certifications such as Certified Information Systems Security</b></li></ul>
<p><b>Professional (CISSP), Certified Information Security Manager (CISM), Certified</b></p>
<p><b>Information Systems Auditor (CISA), Certified in Risk and Information Systems</b></p>
<p><b>Control (CRISC) or similar preferred</b></p>
<p><b>Equal Opportunity Employer</b></p>
<p>All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status or any other protected characteristic. EEO/Disabled/Vets</p>
<p><b>Reasonable Accommodation</b></p>
<p>We are committed to providing reasonable accommodation for qualified individuals with disabilities in our job application and/or interview process. If you need assistance or accommodation in completing your application or participating in an interview due to a disability, email us at humanresources@newscorp.com . Please put &quot;Reasonable Accommodation&quot; in the subject line and provide a brief description of the type of assistance you need. This inbox will not be monitored for application status updates.</p>
<p>Please refer to the privacy notice at the bottom of this page for submitting any data access, deletion, or other data subject rights requests, where permitted under your local laws and regulations.</p>
<p>Base Pay Range: $80,000 - $110,000 + Bonus</p>
<p>We&rsquo;re committed to offering competitive and flexible compensation to attract top talent. This pay range reflects our good faith estimate for the role and may vary based on a candidate&rsquo;s experience, skills, location, and other relevant factors.</p>
<p>For bonus-eligible roles, targets are determined based on multiple considerations, including market benchmarks and individual contributions.</p>
<p>For benefits-eligible roles, we offer a comprehensive and competitive benefits package covering health, retirement, wellbeing, and more, along with optional benefits to meet the diverse needs of our employees.</p>
<p>News Corp (Nasdaq: NWS, NWSA; ASX: NWS, NWSLV) is a global, diversified media and information services company focused on creating and distributing authoritative and engaging content and other products and services. The company comprises businesses across a range of media, including: information services and news, digital real estate services and book publishing. Headquartered in New York, News Corp operates primarily in the United States, Australia and the United Kingdom, and its content and other products and services are distributed and consumed worldwide. More information is available at: http://newscorp.com.</p>
<p>If you are a current employee in Workday, please navigate to the Jobs Hub and select Browse Jobs to apply internally.</p></div></div><div></div>

Cyber GRC Analyst

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Top Secret</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Washington, District of Columbia</div>
<i>(</i><i>Hybrid Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Building Architecture</p>
</div><div><p>Design</p>
</div><div><p>VMware</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ223555</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>The Sr. Cyber Security Architect will provide subject matter expertise across cloud security, identity architecture, Zero Trust, network segmentation, application/container security, and enterprise monitoring capabilities. This role requires adaptability, critical thinking, and leadership advisory skills as the position aims to fundamentally re-shape the client&rsquo;s cybersecurity posture. The position requires the ability to operate with substantial independence, as the architect will spearhead multi-disciplinary technical efforts, act as an advisor to executives, and ensure the modernization and evolution of the client&rsquo;s technology environment.</p>
<p></p><p>The Security Architect is also responsible for defining and implementing secure enterprise architectures, engineering complex cybersecurity solutions, and integrating federal security mandates across the agency's technology stack.</p>
<ul><li>Lead enterprise cybersecurity architecture efforts by designing and governing integrated architectures across identity, devices, networks, applications, and data within a Zero Trust model.</li>
<li>Develop secure architectures for hybrid on-prem/cloud environments, Microsoft 365, identity services, and container ecosystems.</li>
<li>Establish enterprise patterns, baselines, and engineering standards.</li>
<li>Ensure alignment with NIST SP 800 53, RMF, and OMB/CISA directives.</li>
<li>Lead major cybersecurity modernization initiatives including defining scope, technical objectives, dependencies, schedules, and measurable outcomes.</li>
<li>Implement security infrastructure upgrades; Provide secure architecture solutions for Virtual Desktop and Server Infrastructures</li>
<li>Coordinate engineering, cloud, network, application, and development teams to oversee threat modeling, secure API design, encryption, secrets management.</li>
<li>Manage architectural risk; conduct impact analyses; and enforce technical quality gates.</li>
<li>Leading Zero Trust-aligned enterprise architectures across identity, cloud, applications, and data AND establishing standards and baselines to ensure compliance with NIST, RMF, and federal directives.</li>
<li>Performing functional testing and validation of security products.</li>
<li>Designing and implementing secure file sharing and cross domain solutions.</li>
<li>Directing or participating in major cybersecurity modernization efforts (i.e. coordinating cross-functional teams, managing architectural risk, overseeing pilots and vendor integrations, and driving enterprise application security).</li>
<li>Advancing the security of enterprise applications and platforms by embedding secure designing practices; integrating automated security testing and software-composition analysis; and applying threat analysis, API security, and data protection strategies.</li>
<li>Advising senior leadership on strategy and enterprise risk; leading or participating in architecture boards and interagency councils or industry working groups; and representing the organization to internal and external stakeholders.</li>
</ul><p></p><p>WHAT YOU&rsquo;LL NEED TO SUCCEED</p>
<p>Bring your cyber expertise and drive for innovation to GDIT. The Cybersecurity Analyst Sr Principal must have:</p>
<ul><li>Education: Bachelors degree in a technical discipline</li>
<li>Experience: 10+ years of related experience</li>
<li>Desired Technical skills: Experience with various Operating Systems (Linux/Windows/MacOS), various scripting languages (Python/Perl/Shell, etc); SEIM technologies (IBM Qradar, Splunk, or Elastic); on-prem and cloud implementations, IDS/IPS solutions; VMWare (ESXi, VMware vCenter, VMware VSAN, VMware View)</li>
<li>Security clearance level: TS with SCI Eligibility</li>
<li>US citizenship required</li>
<li>Role requirements: Onsite presence required, with telework availability (approval required); limited CONUS travel.</li><br>
</ul><div><br>
GDIT IS YOUR PLACE
<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities
</li><li>Support: An internal mobility team focused on helping you achieve your career goals
</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
</li><li>Community: Award-winning culture of innovation and a military-friendly workplace
</li></ul><br>
OWN YOUR OPPORTUNITY
<br>
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
</div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>10 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $178,500 - $241,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Sr. Cybersecurity Architect - Active Top Secret

Booz Allen Hamilton

<div>Cybersecurity Policy and Compliance Analyst<p><b>
The Opportunity:</b></p><p>
When our country&rsquo;s cybersecurity is on the line, simply reacting is not enough&mdash;we need a plan. And when that plan needs to support our defense infrastructure, we need strategic policy development. That&rsquo;s why we need you, a policy specialist with the expertise required to analyze the policies that determine our cyber resilience.</p><p></p><p>
As a cyber strategic planning and policy compliance specialist on our team, you&rsquo;ll lead the assessment of your client&rsquo;s current cyber policies, the coverage of those policies, and areas of risks. You&rsquo;ll evaluate how policies stack up to regulations, best practices, and industry standards. As you guide your client through understanding acceptable risk and availability, you&rsquo;ll advance the development of a strategic cyber roadmap. You&rsquo;ll work to ensure the client operates securely as they navigate an evolving IT environment.</p><p></p><p>
Work with us as we secure our nation&rsquo;s critical infrastructure through strategic cyber policy development.</p><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
10+ years of experience in professional services, federal government, or federal consulting</p></li><li><p>
Experience analyzing the development of cybersecurity policies and strategies</p></li><li><p>
Experience writing or drafting executive or formal senior-level correspondence or material such as organization level policies, strategies, or guidance to support decision-making</p></li><li><p>
Experience supporting a DoD-level organization, including Action Officer duties and staffing processes or tools such as CATMS or JSAP</p></li><li><p>
Experience briefing clients and team members on technical, policy, and functional issues</p></li><li><p>
TS/SCI clearance</p></li><li><p>
Bachelor&rsquo;s degree</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
Experience with risk analysis</p></li><li><p>
Experience supporting DoD-level organizations, including Action Officer duties and staffing processes or tools</p></li><li><p>
Knowledge of NIST 800 series publications</p></li><li><p>
Knowledge of Joint instructions and manuals</p></li><li><p>
Knowledge of DoD policy around non-traditional IT cybersecurity</p></li><li><p>
Possession of excellent organizational, problem solving, interpersonal, and verbal and written communication skills</p></li></ul><p></p><p><b>
Clearance:</b><br>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Candidate AI Usage Policy</b></p><p>
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on <b>your </b>own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited <b>unless permission is explicitly provided</b>.
</p><p></p><p><b>Work Model</b><br>
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.</p><ul><li><p><b>
Remote</b>: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</p></li><li><p><b>
Hybrid</b>: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</p></li><li><p><b>
Onsite</b>: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</p></li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Cybersecurity Policy and Compliance Analyst

CureMD

<div><p><b>Job Overview:</b></p><p></p><p>
The Application Security Analyst at CureMD is a crucial member of our security team responsible for safeguarding our applications, data, and systems against potential security threats and vulnerabilities. This position offers a unique opportunity for professional growth and skill development within the field of application security. As an Application Security Analyst, you will work under the guidance of experienced security professionals, gaining hands-on experience in identifying and addressing security risks.</p><p></p><p><b>
Job Responsibilities:</b></p><p></p><ul><li>
Security Assessments.</li><li>
Ability to exploit recognized vulnerabilities and discover new vulnerabilities.</li><li>
Analyzing and auditing the Source code of the Web/Mobile Application.</li><li>
Proficiency in scripting, Unix operating systems and windows.</li><li>
Proficient in Linux operating system configuration, utilities, and programming,</li><li>
Conducted manual external and internal penetration testing.</li><li>
Conduct Penetration testing/ Vulnerabilities Assessment for Cloud based web, desktop, and mobile apps.</li><li>
Perform static and dynamic code testing, manual code inspection, threat modeling, design reviews to identify vulnerabilities and security defects</li><li>
Keep up with the latest methods for ethical hacking and testing and are always evaluating new penetration testing tools</li><li>
Collaborate with other team members and stakeholders</li><li>
Assist in Security operational tasks.</li></ul><p></p><p><b>
Qualifications</b>:</p><p></p><ul><li>
Bachelors in Information/Cyber Security, Information Technology, Computer Science or Software Engineering with majors in Information Security.</li><li>
Having 1 - 2 years of relevant experience</li><li>
Good understanding of security tools and technologies for performing Penetration Testing.</li><li>
Have Knowledge of different coding languages.</li><li>
Experience in testing business critical environments.</li><li>
CEH or any other related professional certification.</li><li>
Solid understanding of information security and applied cryptographic protocols.</li><li>
Good knowledge of security technologies for secure software development such as cryptography, authentication techniques and protocols etc.</li><li>
Having OWASP top ten vulnerabilities Knowledge.</li><li>
Good to understand tools and technologies for performing Penetration Testing.</li></ul><p></p><p><b>
Compensation and Benefits:</b></p><p></p><p><b>
Financial:</b></p><p></p><ul><li>
Competitive salary and bi-annual bonus.</li><li>
Fast track and uncapped career growth for high performers.</li><li>
Company-sponsored vehicle financing (car and bike).</li><li>
Interest-free loans.</li><li>
Provident Fund: CureMD matches up to 8% of your base salary.</li></ul><p></p><p><b>
Health and Wellness:</b></p><p></p><ul><li>
In-house clinic with a team of certified male and female doctors with 24/7 telemedicine service.</li><li>
Hospital treatment monitoring by company doctors.</li><li>
Comprehensive health coverage for your immediate family (outpatient, inpatient, maternity and parents' inpatient).</li><li>
Exclusive health benefits and discounts at top class clinics and labs.</li></ul><p></p><p><b>
Supportive Workplace:</b></p><p></p><ul><li>
Pick-up and drop-off services for female employees.</li><li>
In-house daycare facility.</li><li>
In-house gym and recreational area to unwind.</li></ul><p></p><p><b>
Continued Learning:</b></p><p></p><ul><li>
Company-sponsored trainings, workshops, development programs and retreats.</li><li>
Paid specialized trainings/certifications.</li></ul><p></p><p><b>
The Difference You&rsquo;ll Make:</b></p><p><br>
At CureMD, every role, whether senior or junior, plays a pivotal part in transforming healthcare. By joining our innovative team, you&rsquo;ll contribute to groundbreaking technology that directly impacts patient care, enhances healthcare efficiency, and saves lives globally. Your skills and passion will drive meaningful change, helping us deliver solutions that support healthcare professionals in critical, real-time settings. Together, we&rsquo;re not just advancing technology &mdash; we&rsquo;re making a tangible difference in people&rsquo;s lives. <b>Together, Let&rsquo;s save lives.</b></p></div>

Application Security Analyst

Search 3249+ Cyber security analyst jobs near you this August. New roles added regularly across leading industries. Apply today.