Information Security Analyst, Intermediate
Resource Management Concepts, Inc.
Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.
RMC is hiring an Information Security Analyst with Risk Management Framework (RMF) experience to support our customer in Saint Inigoes, MD. The candiate will provide Cybersecurity analysis, engineering, and certification and accreditation (C&A)/Assessment and Authorization (A&A) support in accordance with National Institute of Standards and Technology (NIST), RMF, or Platform Information Technology (PIT) methodologies.
The selected applicant will also be responsible for the following:
- Plan, implement, upgrade and monitor security measures for the protection of complex DoD communication systems and networks.
- Assess IA posture of DoD communications systems and networks in support of system certification and accreditation.
- Maintain and support current and ongoing C&A packages.
- Develop and maintain system IA documentation to support certification of compliance to applicable standards including:
- DoDI 8510.01 Risk Management Framework (RMF) for DoD Systems
- Intelligence Community Directive Number 705
- Sensitive Compartmented Information Facilities and Intelligence Community Directive (ICD) Number 503
- Intelligence Community Information Technology Systems Security Risk Management Certification and Accreditation
The applicant must be knowledgeable and proficient in the following:
- Risk Management Framework (RMF) processes.
- Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
- IT systems and subsystems.
- Project management.
- Written and verbal communications.
- Teamwork and collaboration.
- The applicant must be familiar with working on classified systems (i.e., SIPRNet) within secure environments.
Requirements
- A Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field, is required. Or a minimum of four (4) years experience and and a CASP+ certificate in substitute of degree.
- Experience supporting Army RMF packages.
- Experience with DSS RMF process, DISA ACAS, and DoD IA compliance standards.
- Security + CE/DoD 8570.01 IAT-III compliance and knowledge of Navy IT/IA policies and procedures is required.
- Occasional travel is required.
- Security Clearance: An active DoD Secret clearance is required to start.
- Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.
Benefits
At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.
Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $90,000 to $120,000 (annually).
Mainframe Security Analyst IV - ACF2, TSS, and RACF
Syncreon Consulting
Job Description: • Resource provides day to day tactical execution of project. Including detailed analytics of various data points. Mainframe Security expert who will guide projects, asset modeling, and make project docu-mentation entries as required.
• Direct interface with Client staff on training and day to day questions of our home-grown Vulnerability tool and other utility tools to manage vulnerabilities.
• Serve as a subject matter expert on Mainframe Security Systems including ACF2, TSS, and RACF as a part of a vulnerability management projects.
• Determine security standards regarding z/OS hardening, security controls, and vulnerability remediation.
• Communicate between mainframe engineering teams and information security teams.
• zSecure Audit experience required (7-10 years) • Leveraged z/OS RACF STIG in hardening efforts.
• z/OS security consulting / penetration testing background preferred.
• Good communication and documentation skills
Must know Mainframe - REXX, IBM SYNC SORT, and ICETOOL -zSecure Audit experience required (7-10years) -ACF2, Top Secret (TSS), and RACF -Will use confluence and visio -Cybersecurity - how it works within mainframe.
Regards,
Mohammed ilyas,
PH - (phone number removed) or Text - (phone number removed) or you can share the updated resume at Mohammed@vtekis. com
Epic Security & Access Management Analyst
Dale Workforce Solutions
Job Responsibilities:
- The responsibilities of the Technology Administration Analyst II encompass identical responsibilities as the Technology Administration Analyst I, but with a greater degree of complexity and detail. A Technology Administration Analyst II also:
- Contributes to analysis and design for current and emerging technologies within their discipline.
- Exhibits advanced technical knowledge of and expertise in all aspects of technology administration as outlined in Level I.
- Demonstrates the ability to analyze trends, provides systems statistical trending & analysis, performs support testing, and follows appropriate escalation and notification procedures.
- Demonstrates the ability to create detailed work-related documentation (RFP's, project plans, etc.).
- Exhibits intermediate expertise in critiquing the use of existing and future technologies.
- Coaches and trains Level I staff, customers and peers with differing detailed knowledge
- Assists in the orientation and integration of Level I hires.
- Participates in Chop corporate and DTS processes including, but not limited to, work flow, project management, time accounts and employee reviews.
- Works with on-call staff, management, equipment vendors, or other appropriate contacts to resolve the situation as quickly as possible.
- Identifies trends and opportunities to improve performance and resolve problems.
- Evaluates and makes recommendations concerning software, equipment, security and facilities.
- Demonstrates knowledge of infrastructure components that provide the foundation to the applications owned by technology administration.
- Provides technical solutions and direction, performance tuning and technology updates, identifies opportunities for new technology deployments, assesses projected lifespan of existing and future technology.
- Prepares formal change implementation plans and monitors their implementation.
- Participates in projects and demonstrates ability to complete tasks assigned without supervision.
- Participates in internal and external audit activities.
Required Skills & Experience:
- Voice Concentration:
- Demonstrate the ability to support voice infrastructure and provide administration, maintenance and management of interactive voice response system, voicemail, VOIP, and other telephony related areas.
- Working knowledge and experience in the installation, maintenance and administration of telephony systems, voicemail, programming and/or scripting, VOIP, and unified communications.
- Understanding of telephony concepts and technologies.
- Working advanced knowledge of telecommunication hardware, circuits and call routing.
- Account Concentration:
- Working knowledge and Experience in account management and active directory (provisioning, organizational structure, scripting).
- Working knowledge and Experience with Epic.
- Working knowledge of security standards in account provisioning.
- Working knowledge and experience of Active Directory, Group Policy, Asset management lifecycle and tools, device hardware, platforms and operating systems.
- At least two (2) years relevant (in concentration) IT experience.
- Experience in healthcare technology.
- Account Concentration:
- Experience with Security administration and/or Chronicles.
- Working knowledge and Experience with identity management tools.
- Understanding of remote access administration.
- Knowledge of Microsoft Management Tools, Enterprise Printing Management, software distribution tools.
- Voice/ Platform Concentration Not Necessary
- High School Diploma or GED.
- Technical Diploma.
- Epic Security certification.
- CompTIA certification.
Information Security Analyst
ASCENDING, Inc.
1-Year Contract (potential to extend)
Hybrid – Richmond VA (3 days onsite)
We are seeking an experienced Information Security Analyst to support governance, risk, compliance, privacy, and security initiatives across enterprise programs, systems, applications, and third-party engagements. This role will partner closely with business stakeholders, project teams, legal/privacy teams, and IT to ensure appropriate security controls, documentation, and risk-management practices are in place.
The ideal candidate brings strong experience with GRC processes, security frameworks, risk assessments, security documentation, and stakeholder communication.
Key Responsibilities
- Maintain and update security, risk, compliance, and related documentation within a Governance, Risk, and Compliance (GRC) platform.
- Partner with business and technology stakeholders to develop and maintain Information System Security Plans (SSPs).
- Facilitate information-gathering sessions to support SSPs, risk assessments, control evaluations, and other security work products.
- Participate in information security and privacy initiatives across business units, systems, projects, and supplier engagements.
- Represent the Information Security function on project and PMO initiatives to ensure security and privacy requirements are addressed throughout the project lifecycle.
- Collaborate with business teams to understand operational needs, identify security risks, recommend practical control options, and support compliance requirements.
- Assist in developing, maintaining, and improving information security policies, standards, processes, and procedures.
- Research industry best practices and applicable security guidance from reputable sources.
- Create and maintain controls documentation, including system diagrams, process maps, risk assessment templates, and security artifacts.
- Review vendor contracts, agreements, and supporting documentation to help ensure appropriate information security protections are included.
- Support security awareness, education, and other enterprise security initiatives as needed.
- Minimum of 3 years of experience in information security, with emphasis on governance, risk, and compliance (GRC).
- Strong understanding of information security principles, practices, controls, and risk-management methodologies.
- Experience working with security frameworks such as NIST, ISO 27001, or similar standards.
- Familiarity with security and privacy documentation, including SSPs, risk assessments, system diagrams, data flows, and process maps.
- Knowledge of IT infrastructure planning, implementation, and management principles.
- Experience supporting third-party/vendor risk reviews, contract reviews, or supplier security assessments.
- Excellent written, verbal, and stakeholder communication skills.
- Strong organizational skills, attention to detail, and ability to manage multiple priorities.
- Ability to work independently, meet deadlines, and adapt effectively in changing or ambiguous environments.
- Experience using a GRC platform.
- Experience supporting security and privacy programs in a regulated environment.
- Relevant certifications such as Security+, CISSP, CISM, CRISC, ISO 27001, or comparable credentials.
- Experience supporting security awareness and training programs.
Mainframe Security Analyst IV - ACF2, TSS, and RACF
Syncreon Consulting
Job Description: • Resource provides day to day tactical execution of project. Including detailed analytics of various data points. Mainframe Security expert who will guide projects, asset modeling, and make project docu-mentation entries as required.
• Direct interface with Client staff on training and day to day questions of our home-grown Vulnerability tool and other utility tools to manage vulnerabilities.
• Serve as a subject matter expert on Mainframe Security Systems including ACF2, TSS, and RACF as a part of a vulnerability management projects.
• Determine security standards regarding z/OS hardening, security controls, and vulnerability remediation.
• Communicate between mainframe engineering teams and information security teams.
• zSecure Audit experience required (7-10 years) • Leveraged z/OS RACF STIG in hardening efforts.
• z/OS security consulting / penetration testing background preferred.
• Good communication and documentation skills
Must know Mainframe - REXX, IBM SYNC SORT, and ICETOOL -zSecure Audit experience required (7-10years) -ACF2, Top Secret (TSS), and RACF -Will use confluence and visio -Cybersecurity - how it works within mainframe.
Regards,
Mohammed ilyas,
PH - (phone number removed) or Text - (phone number removed) or you can share the updated resume at Mohammed@vtekis. com
Mainframe Security Analyst IV - ACF2, TSS, and RACF
Syncreon Consulting
Job Description: • Resource provides day to day tactical execution of project. Including detailed analytics of various data points. Mainframe Security expert who will guide projects, asset modeling, and make project docu-mentation entries as required.
• Direct interface with Client staff on training and day to day questions of our home-grown Vulnerability tool and other utility tools to manage vulnerabilities.
• Serve as a subject matter expert on Mainframe Security Systems including ACF2, TSS, and RACF as a part of a vulnerability management projects.
• Determine security standards regarding z/OS hardening, security controls, and vulnerability remediation.
• Communicate between mainframe engineering teams and information security teams.
• zSecure Audit experience required (7-10 years) • Leveraged z/OS RACF STIG in hardening efforts.
• z/OS security consulting / penetration testing background preferred.
• Good communication and documentation skills
Must know Mainframe - REXX, IBM SYNC SORT, and ICETOOL -zSecure Audit experience required (7-10years) -ACF2, Top Secret (TSS), and RACF -Will use confluence and visio -Cybersecurity - how it works within mainframe.
Regards,
Mohammed ilyas,
PH - (phone number removed) or Text - (phone number removed) or you can share the updated resume at Mohammed@vtekis. com
Information Technology - Analyst, Cyber Security
Ampcus Incorporated
Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.
PurposeTo ensure the organization's data remains protected from inappropriate access, disclosure, and/or damage. To advocate for and execute the processes and practices of the Cybersecurity team while supporting business and customer needs.
Essential Functions- 25% Develop/Enhance companywide security best practices.
- 25% Research information security improvements and brief management.
- 25% Remain up to date on Information Security trends and emergent threats.
- 25% Assess, plan, and execute security measures in a layered approach to protect the organization.
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Education LevelBachelor's Degree
Education DetailsComputer Science, Information Technology, or related field
Experience3 years relevant cyber security experience.
In Lieu of EducationIn lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience.
Preferred Qualifications Knowledge, Skills and Abilities (KSAs)- Ability to manage multiple tasks and deliverables with minimal supervision. Proficient
- Ability to explain technical information to technical and nontechnical personnel. Proficient
- Proficiency in the cybersecurity domain. Proficient
- Ability to work collaboratively within a team to perform daily work. Proficient
- Understanding of business needs and commitment to delivering high-quality, prompt, and efficient service. Proficient
- Knowledge of cybersecurity risk management techniques, frameworks, best practices, and industry/regulatory requirements. Proficient
- CISSP Certified Information Systems Security Professional Upon Hire Pref
- Certified Ethical Hacker (CEH) Upon Hire Pref
- Certified Threat Intelligence Analyst (CTIA)-ECCOUNCIL Upon Hire Pref
- Certification and Accreditation Professional (CAP) Upon Hire Pref
- EnCase Certified Examiner Upon Hire Pref
Mainframe Security Analyst IV - ACF2, TSS, and RACF
Syncreon Consulting
Job Description: • Resource provides day to day tactical execution of project. Including detailed analytics of various data points. Mainframe Security expert who will guide projects, asset modeling, and make project docu-mentation entries as required.
• Direct interface with Client staff on training and day to day questions of our home-grown Vulnerability tool and other utility tools to manage vulnerabilities.
• Serve as a subject matter expert on Mainframe Security Systems including ACF2, TSS, and RACF as a part of a vulnerability management projects.
• Determine security standards regarding z/OS hardening, security controls, and vulnerability remediation.
• Communicate between mainframe engineering teams and information security teams.
• zSecure Audit experience required (7-10 years) • Leveraged z/OS RACF STIG in hardening efforts.
• z/OS security consulting / penetration testing background preferred.
• Good communication and documentation skills
Must know Mainframe - REXX, IBM SYNC SORT, and ICETOOL -zSecure Audit experience required (7-10years) -ACF2, Top Secret (TSS), and RACF -Will use confluence and visio -Cybersecurity - how it works within mainframe.
Regards,
Mohammed ilyas,
PH - (phone number removed) or Text - (phone number removed) or you can share the updated resume at Mohammed@vtekis. com
CW-Cyber Security Analyst III
eTeam Inc.
Location: Iselin, NJ / Chicago, IL / Portland, OR (Hybrid)
Duration: 08 Months (Possible Extension)
Client: Financial Services
CW-Cyber Security Analyst III
The Sr. Info Security Analyst drafts, communicates, implements, enforces and monitors the organization's security controls to protect technology assets from intentional or inadvertent modification, disclosure or destruction. Under limited supervision, this job works independently to manage and monitor the organization's IT systems and networks to ensure the security and safety of the organization's information.
Key Responsibilities and Duties
-
Ensures implementation of secure operating systems, networks and databases for the organization.
-
Performs complex risk assessments and executes tests of data processing system to ensure functioning of data processing activities and security measures.
-
Drafts plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
-
Encrypts data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
-
Facilitates risk audits and assessments and provides recommendations for application design to ensure operating effectiveness.
-
Monitors analysis of system access logs, ensuring only permitted individuals have access to company information.
-
Reviews violations of computer security procedures and discusses procedures with violators to ensure violations are not repeated.
-
Trains users and promotes security awareness to ensure system security and to improve server and network efficiency.
Educational Requirements
-
University (Degree) Preferred
Work Experience
-
3 Years Required; 5 Years Preferred
Physical Requirements
-
Physical Requirements: Sedentary Work
Career Level
7IC
Tier 2 Security Analyst
WEBIT Services
- 8WEBIT Services is an employee-owned Managed Services Provider committed to delivering an exceptional IT solution. As we continue to grow, we are seeking a Tier 2 Security Analyst to protect our clients' environments and raise the quality of security work across the Naperville, Illinois team.
Position Summary
The Tier 2 Security Analyst is the working core of WEBIT's security function. You lead incident response for security events, from containment and investigation through remediation, own alert tuning and detection rules in our SIEM/MDR platform, run the vulnerability management lifecycle for assigned clients, and author the runbooks that Tier 1 analysts work from. This hands-on role: you are the person that turns an alert into a confirmed finding, a finding into a remediation ticket, and a resolved ticket into a runbook the next analyst can follow.
Key Responsibilities
- Lead incident response for security events, from containment and investigation through eradication and remediation, document each incident to a reviewable standard.
- Run incident bridges calmly, keep infected clients informed, and lead the post incident review.
- Own SIEM/MDR alert tuning and detection rule management for the assigned clients, reducing noise without reducing coverage.
- Invest escalated alerts from the EDR/MDR platform, Microsoft 365 Defender, Entra ID sign-ins logs, and our email security platform.
- Administer EDR policies and exclusions and the email security rule set.
- Own the vulnerability management lifecycle assigned for clients: scan, prioritize, open remediation tickets to the Help Desk and Field Teams and track them to closure.
- Verify MFA, Conditional Access, and backup status across prioritize by risk, and remediate gaps against the WEBIT security baseline.
- Perform remediation by client's frameworks and document evidence for audits and reviews.
- Lead quarterly reviews and present findings.
- Implement Conditional Access, MFA and Intune security policy changes to standards.
Requirements
Required
- Formal education is not required. Relevant certifications and demonstrated competency also apply.
- 2+ years of experience in IT support or security operations including 1 year investigating and responding to security alerts or incidents.
- Hands on experience with EDR/MDR platform. Microsoft 365, Defender, and Entra ID.
- Able to explain a security finding to a non-technical client contact.
Preferred
- Prior MSP experience: multi-tenant environments, SLA driven delivery, and PSA workflows.
- Certifications CompTIA Security, Microsoft SC-900, CompTIA CYSA+ or Microsoft SC-200, CompTIA Network+,
Microsoft AZ-900, certifications for EDR/MDR platforms.
Success in this Role
- Works automatously, acts proactively and hit your KPI's.
- Write SOP's and drive process improvement.
Benefits
Company Paid Insurance Premium for Employee
Company Paid STD
Company Paid LTD
Vision Options
Dental Options
401k Match program
Employee Ownership Eligible after 1 year of service
Unlimited PTO after 90 days of service
Mainframe Security Analyst IV - ACF2, TSS, and RACF
Syncreon Consulting
Job Description: • Resource provides day to day tactical execution of project. Including detailed analytics of various data points. Mainframe Security expert who will guide projects, asset modeling, and make project docu-mentation entries as required.
• Direct interface with Client staff on training and day to day questions of our home-grown Vulnerability tool and other utility tools to manage vulnerabilities.
• Serve as a subject matter expert on Mainframe Security Systems including ACF2, TSS, and RACF as a part of a vulnerability management projects.
• Determine security standards regarding z/OS hardening, security controls, and vulnerability remediation.
• Communicate between mainframe engineering teams and information security teams.
• zSecure Audit experience required (7-10 years) • Leveraged z/OS RACF STIG in hardening efforts.
• z/OS security consulting / penetration testing background preferred.
• Good communication and documentation skills
Must know Mainframe - REXX, IBM SYNC SORT, and ICETOOL -zSecure Audit experience required (7-10years) -ACF2, Top Secret (TSS), and RACF -Will use confluence and visio -Cybersecurity - how it works within mainframe.
Regards,
Mohammed ilyas,
PH - (phone number removed) or Text - (phone number removed) or you can share the updated resume at Mohammed@vtekis. com