Senior Information Security Specialist

Company Description

Arthur Grand Technologies (www.arthurgrand.com) is in the business of providing staffing and technology consulting services. We have doubled our revenue year over year for the past 5 years. This speaks to the long-lasting relationship and customer satisfaction that we have built in this short span of time. Our company is managed by a team of professionals who worked for big 5 consulting firms for 20+ years. 

We are a minority owned staff augmentation and technology consulting company
To keep our valued employees, we need to keep them engaged in challenging, interesting work, offer market-relevant benefits and provide continued opportunities for professional growth.

Job Description

Arthur Grand Technologies is currently seeking a highly motivated and skilled Senior Information Security Specialist for one of our clients

Position:Senior Information Security Specialist

Location: Arlington, VA

Long Term Contract

Job Description

Client is seeking an experienced Information Security Specialist to support our Government Partner with cyber related activities including stakeholder management, vulnerability research, coordination with the system engineers and ISSO’s.

In this role you will:

• Lead mitigation / remediation process, following approved corrective action plans
• Support program to ensure appropriate implementation of the NIST Security Framework through the lifecycle of the system including but not limited to the pre-security assessment tasks and coordination with System Owners (SO)
• Responsible for coordinating with internal stakeholders and external vendors to gather requirements and execute cyber related tasks
• Coordinate and facilitate pre-assessment meetings with stakeholders
• Experience integrating diverse data streams and perform detail analysis
• Establishes data standards and acts as custodian of IT security and service delivery data sets and streams
• Experience in analyzing complex networks and systems from a security standpoint
• Experience in analyzing log data from various network components and operating systems as well as packet capture data
• Knowledge of the complex environment involving shared networks and multiple security enclaves
• Systems Engineering with network analyst\\engineering background
• Network security background with ability to analyze log data as well as familiarity of how to generate logs and metrics from product suites, such as Cisco, AirWatch, and desktop\\server OS
• Ability to manage and troubleshoot data feeds, Splunk familiarization
• Support process improvement and special project activities requiring engagement and collaboration with a variety of functional teams
• Applying auditing techniques for identifying problems
• Responding to data calls by gathering and analyzing pertinent information, forming conclusions, developing solutions and implementing plans
• Create, document, review and edit as appropriate (new and existing) system security documents for completion and accuracy (to include but not limited to SCD, SSP, SIA, PIA, PTA, POA&M, Disaster Recovery Plan/DRP, etc.) to ensure security requirements are included

Who you are:

• Energized when faced with complex technical challenges and diligently work to identify creative solutions.
• Ability to perform high quality work, both independently and with a team, in a fast-moving environment.
• Ability to plan and prioritize tasks to successfully meet/exceed customer expectations.

Required Education, Experience, & Skills

• 5-7 years of experience working on IT security protocols and RMF Framework
• Bachelor's degree
• A Certified Authorization Professional (CAP) or Systems Security Certified Practitioner (SSCP) while progressing toward a senior certification of CISSP and/or CISA
• Experience with JIRA
• Ability to obtain a Public Trust clearance.
• Proficient in Microsoft Office suite of tools including SharePoint; aptitude for quickly learning related tool sets.

Preferred Education, Experience, & Skills

• Security Development and Operations (SecDevOps)
• Expertise with Splunk
• Scripting tools to include Python, ShellScript, or Ansible
• Cloud security controls and implementation
• PKI implementation
• STIG compliance and vulnerability management
• Virtualization experience (VDI & VMWare)
• Public, private and hybrid Cloud experience (AWS, Microsoft Azure, etc.)
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365

Thanks,