Cyber Security Remediation Analyst

Cyber Security Remediation Analyst

Mosaic451 Federal Services is hiring an IT specialist or remediator to support an on-site customer in Portland, Oregon.  This person will perform assignments associated with the Information Security (INFOSEC) specialty area to plan and carry out difficult and complex INFOSEC assignments.  This candidate will develop and manage customer programs to address continuous monitoring, risk assessment, remediation tracking, external reporting and liaising, critical infrastructure protection coordination and incident and investigations management.

Responsibilities:

• Develops, implements and coordinates activities designed to ensure, protect and restore IT systems, services and capabilities
• Monitors and evaluates systems compliance with IT security requirements
• Provides advice and guidance in implementing IT security policies and procedures in the development and operation of network systems
• Evaluates, recommends the acquisition of, implements and disseminates IT security tools, procedures and practices to protect information assets
• Reviews independent assessments for external systems or networks operated on behalf of customer requirement and recommends new or revised security measures and countermeasures based on the results of those reviews
• Evaluates new security technologies such as public key infrastructure certificates, secure cards and biometrics
• Recommends the purchase of IT security-related software and administers and monitors implementation
• Identifies and specifies information systems security requirements associated with migrations to new environments and provides guidance in planning and implementing migration activities
• Develops specifications to ensure compliance with security requirements at the systems or LAN level
• Ensures proper protection of evidence used in assessments
• Performs responses to DOE, DHS, OMB and data calls (among things). Coordinates the internal collection, correlation and reporting of information
• Updates metric reporting for cybersecurity in support of the client’s major support initiatives
• Performs information security assessments, risk assessments, continuous monitoring, critical infrastructure protection coordination and/or remediation management

Qualifications:

• Bachelor’s Degree in a related field plus additional related college courses or professional training
• 3-7 years of progressively responsible, directly related, experience required
• Knowledge of RMF process, NIST 800-53 and associated security controls
• Experience with understanding vulnerability scans and have the ability to convey relevant information to individual system owners
• Must be a team player, dedicated to program support
• Must be capable of multitasking and working several complex and diverse tasks with simultaneous or near simultaneous deadlines
• Knowledge and use of security and event management tools such as Splunk
• Possess solid communication skills and the ability to express thoughts and ideas clearly and concisely

Additional Requirements:

The ideal candidate will (i) use judgment, initiative, and resourcefulness in deviating from established methods to modify, adapt and/or refine broader guidelines to resolve specific complex and/or intricate issues and problems; (ii) treat specific issues or problems; (iii) research trends and patterns; (iv) develop new standards, criteria, methods, and techniques; and (v) propose new policies and practices.

U.S. CITIZENSHIP REQUIRED

Ability to SUCCESSFUL OBTAIN A FEDERAL security clearance

Benefits: 

Medical, Dental, Vision, Life Insurance and Disability Insurance

401(k)

Unlimited PTO

10 paid holidays per year

#LI-DNI