Job Description:

THE OPPORTUNITY/ RESPONSIBILITIES

Duties: Monitor, maintain, and review network, devices, and servers for security vulnerabilities and violations. Maintain and coordinate security policy development with a focus on information security’s best practices, including design, implementation and investigation of security incidents. Participate in evaluating new technologies and applications for the organization, assessing vulnerabilities and risks, detecting and responding to incidents, and recommend appropriate safeguards. Perform annual information security risk assessments, service specific risk assessments, audits on all networks and systems, forensic and data security analyses, network infrastructure risk assessments, and reporting on security status and incidents. Schedule, maintain, and conduct monthly and annual vulnerability scans and social engineering engagements. Work with auditors and examiners to ensure the network and systems are secure and meet regulatory guidelines. Remote Work Permitted.

Qualifications

HOW YOU CAN FIT (Qualifications)

Requirements: Bachelor’s degree in Cybersecurity, Information Systems, Engineering or a closely related field of study and three (3) years of experience as a Security Analyst, Application Security Engineer, Information Security Analyst, Software Engineer or a closely related occupation. Employer will also accept a Master’s degree in the above stated fields and one year of experience in the above stated occupations. Also requires education, training or experience in the following:

• Infrastructure security skills including IDS/IPS, firewall, SIEM, server and OS hardening, malware detection, physical security, transport and at-rest encryption on file systems, DB, and other data persistence mechanisms;

• Determining and implementing security controls to meet a variety of security best practices;

• Performing penetration tests, vulnerability assessments, and risk assessments;

• Effectively communicating security- and risk-related concepts to technical and nontechnical audiences;

• Cybersecurity programs including SOX, PCI, ISO, NIST 800-53, NIST CSF, CIS, and SAN Critical Controls; and

• Security tools such as SIEM, DLP and Vulnerability Management.

SALARY:             $120,657 to $131,900 per year

This Notice is being provided as a result of the filing of an application for permanent alien labor certification for the opportunity. Any person may provide documentary evidence bearing on the application to:

Certifying Officer

U.S. Department of Labor

Employment and Training Administration

Office of Foreign Labor Certification

200 Constitution Avenue NW, Room N-5311

Washington, DC 20210

Time Type:

Full time

Job Type:

Regular

Job Family Group:

Information Technology

Location Region/State:

New York

Compensation Range:

Annual Salary: 101,000.00 - 131,900.00

EEO Statement:

Scholastic is an Equal Opportunity Employer. Our policy is clear: there shall be no discrimination on the basis of race, religion, color, sex, pregnancy, national origin, marital status, sexual orientation, gender identity or expression, age, non-disqualifying physical or mental disability, or status as a disabled veteran or Vietnam veteran. Those factors shall not influence the determination of qualifications for a job or other opportunity within the company. Further, all personnel actions (such as compensation, tuition aid, benefits, transfers, promotions, and dismissals, company-sponsored training, social and recreational programs) shall be administered without discrimination.

EEO is the Law Poster

EEO Scholastic Policy Statement

Pay Transparency Provision