Endpoint Security Analyst

At Lifescale Analytics we help achieve data driven decisions by leveraging strategic technologies to create innovative solutions that ultimately help our clients to navigate their everchanging data have an opportunity for an Endpoint Security Analyst. This role will be an Onsite Role candidates will be required to be onsite in Tallahassee FL. Telecommuting is currently NOT an option for this position. Working hours: Flexibility to work hours between 7:00 AM & 7:00 PM and/or Saturdays either on a rotation or as part of a regular and on call work schedule. Travel and relocation expenses will not be covered by the client or employer.

Applicants responding to this position must be a US Citizen and will be subject to a government security investigation and must meet eligibility requirements by currently possessing the ability to view classified government information. Must have lived in the US for the past 5 years.

The Employer will not sponsor applicants for any employment visas at hiring or in the future including but not limited to H1B EAD or OPT visas. CorptoCorp or subcontract personnel will not be considered for this position.

Scope of Services

• Develops evaluates and manages systems security across the enterprise.
• Areas of concentration include account management password auditing network based and Web applicationbased vulnerability scanning virus management and intrusion detection.
• Requires technical expertise in systems administration and security tools combined with the knowledge of security practices and procedures.
• Assists in the development and implementation of security policies and procedures (e.g. user logon and authentication rules security breach escalation procedures security auditing procedures and use of firewalls and encryption routines).
• Prepares status reports on security matters to develop security risk analysis scenarios and response procedures.
• Enforces security policies and procedures by administering and monitoring security profiles reviews security violation reports and investigates possible security exceptions updates and maintains and documents security controls.
• Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.
• Provides direct support to the business and IT staff for systems security related issues.
• Educates users on systems security standards and procedures.
• Must have broad technical knowledge of network operating systems (e.g. UNIX NT).

Primary Job Duties/Tasks:

• Serve as a member of the Computer Security Incident Response Team.
• Duties includes researching incidents identifying corrective actions documenting status and coordinating responses to Computer Security Incidents.
• Responsible for the tracking and monitoring of endpoint software viruses.
• Enforces endpoint security policies and procedures by administering and monitoring security profiles reviews security violation reports and investigates possible security breaches exceptions updates and maintains and documents security controls.
• Work in conjunction with the Departments Patch Management and Configuration Team in identifying secure configurations for standard client products.
• Provide support/information as needed for implementation of secure baselines through package roll out and/or group policy.
• After implementation of secure baselines use tools to review and ensure compliance with established baselines.
• Responsible for the administration and maintenance of endpoint vulnerability products endpoint vulnerability risk reporting and routine endpoint vulnerability scanning

Experience & Job Specific Knowledge Skills and Abilities (KSAs):

The submitted candidate must be able to apply common knowledge skills and abilities in the following areas:

• Four (4) years of experience in the work related to the position is required.
• Knowledge in the use of appropriate security controls to protect the confidentiality integrity and availability of information technology resources.
• Knowledge of and experience with various computing technologies such as but not limited to: Windows Windows Server Transmission Control Protocol/Internet Protocol (TCP/IP)
• Knowledge of vulnerability management tools.
• Knowledge in the use of information security practices and standards such as NIST CIS Critical Security Controls and the Florida Cybersecurity Standards (742 Florida Administrative 60GG2). Ability to review assess and document compliance with standards.
• Knowledge of Microsoft Systems Center Configuration Manager (SCCM) and other Microsoft support tools/technologies such as Group Policy and PowerShell.
• Knowledge of the application of operating system security settings through direct manipulation of the registry.
• Knowledge of Security Information and Event Management (SEIM) tools.
• The ability to utilize configure and manage Splunk preferred but not required.
• Skills in applying analyzing and assessing information systems and security controls.
• Skilled in the detection of software and hardware security problems.
• Ability to analyze complex technical architecture for security issues.
• Ability to be selfmotivated detailoriented with excellent follow through.
• Ability to assess and analyze risk and provide recommendations to successfully manage risk.
• Ability to author documented analysis of systems to verify compliance with security controls.
• Ability to effectively communicate orally and in writing to a variety of audiences. This includes the ability to communicate professionally with client management to communicate technical issues and concepts to nontechnical staff and to effectively explain security concepts and their benefit.
• Ability to solve problems independently and with teams and exhibit sound judgement and decisionmaking skills.
• Knowledge of Malwarebytes Windows Defender and other vulnerability scanning tools.

General Knowledge Skills and Abilities (KSAs):

The submitted candidate must be able to apply common knowledge skills and abilities in the following areas:

• Initiative: Must be able to comprehend assignments organize workload and meet deadlines with little direction. Must be able to monitor and analyze situations to determine the next step.
• Communication: Can clearly convey information in both written and verbal formats to individuals or groups in a wide variety of settings (i.e. project team meetings management presentations etc.). Must have the ability to effectively listen and process information provided by others.
• Customer Service: Works well with clients and customers (i.e. business office public or other agencies). Able to assess the needs of the customer provide information or assistance to satisfy expectations or resolve a problem.
• Decision Making: Makes sound wellinformed and objective decisions utilizing critical thinking skills and analysis.
• Flexibility: is open to change new processes (or process improvement) and new information. Can adapt in response to new information changing conditions or unexpected obstacles. Ability to receive and give constructive criticism and maintain effective work relationships with others.
• Interpersonal: Shows friendliness courtesy understanding and politeness to others
• Leadership: Motivates encourages and challenges others. Can adapt leadership styles in a variety of situations.
• Problem Solving: Able to identify evaluate and use sound judgement to generate and evaluate alternative actions and make recommendations as accordingly.
• Team Building: Encourages inspires and guides others toward accomplishing the common goal as an equal member of the team.
• Quality Assurance: Knowledge of the ideologies techniques and tools for quality assurance and control. The ability to put the ideologies techniques and tools into practice.

Education:

• Bachelors Degree in Computer Science Information Systems Business Administration Information Security or another related field; or equivalent work experience.