Network Security Analyst

Pay Range: $47.00hr - $52.00hr

Job Overview:

• The Office of Cybersecurity ensures the confidentiality, integrity and availability of client systems and services. The successful candidate will support leadership, business units, partners, and vendors in day-to-day cybersecurity operations, contributing independently on technical tasks and supporting senior analysts on complex initiatives.

SCOPE OF THE PROJECT:

• The successful candidate must have hands-on experience with data network design best practices, routing and switching protocols, network security best practices, and on-premise or cloud networking environments.
• This role requires a candidate who can contribute independently on technical tasks and support more senior analysts on complex initiatives.

DAILY DUTIES / RESPONSIBILITIES:

• This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead. The candidate will support leadership, business units, partners, and vendors in day-to-day cybersecurity operations.
• Assist in maturing network security and compliance solutions.
• Investigate and respond to daily network alerts.
• Perform network security assessments for proposed firewall and infrastructure changes.
• Conduct technical analysis for network security planning and engineering.
• Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency.
• Analyze on-premise and cloud networks for potential threats.
• Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services.
• Monitor emerging threat vectors and recommend countermeasures.
• Collaborate with other areas of the agency to implement security controls.
• Support cloud and on-premise network changes and enhancement projects.
• Ensure compliance with ARC-AMPE, HIPAA and organizational standards.
• Assist with KPI creation and trend report monitoring.
• Participate in firewall configuration reviews and ruleset recertification.
• Provide guidance on best practices to technical teams.
• Perform additional SOC duties as assigned.

Security Program Experience:

Strongly desired experience includes:

• CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks.
• Performing repeatable security processes supporting compliant enterprise architectures.
• Supporting security considerations for multi-tenant cloud environments and vendor integrations.

Technical Experience:

The candidate should have hands-on experience with:

• Secure network design principles.
• Windows, macOS, and Linux operating systems.
• Switching and Routing.
• Enterprise Firewalls.
• Network auditing.
• IDS/IPS platforms.
• Network security monitoring.
• SIEM platforms such as QRadar or Client .
• Vulnerability scanning tools such as Nessus or Qualys.
• Cloud Infrastructure Security.

REQUIRED SKILLS:

• Approximately 3-5 years of hands-on experience in network design, implementation, or support.
• Hands-on experience in IT security or system administration.
• Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models.
• Ability to analyze logs, alerts, and network telemetry.
• Proficiency with Microsoft Office tools.

PREFERRED SKILLS:

• Experience working in regulatory environments.
• Experience supporting health IT or government organizations.
• Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards.
• Cloud network security controls (Azure or AWS).

REQUIRED EDUCATION/CERTIFICATIONS:

• BS degree in Computer Science, Information Systems, Cybersecurity, or a related field; or equivalent experience.
• A network security centric certification such as PCNSE or CCNA.

PREFERRED EDUCATION/CERTIFICATIONS:

• CISSP or Security+.