Job Role/Level\tNetwork Security Analyst / Level 2

Quantity\t1

Mandatory Skills\tIT Security

Preferred Skills\tISC2 Certified Information Systems Security Professional (CISSP)

Skillset Category\tCommon

Brief Job Description\tThe IT Security Officer shall have at least one (1) year of relevant working experience and to provide the following:

• \tProvide subject matter expertise, oversight and reporting on all matters of security, and compliance, within scope of the engagement;

• \tCoordinating investigation, management, and responses to all security related incidents;

-\tGITSir Alerts

-\tGCSOC

• \tOperational oversight on all vulnerability assessments, audit log monitoring activities, baseline compliance and privilege user account administration;

• \tYearly Security Awareness Training (Internal and Agency)

• \tAudit Service (validate RFI items and share with teams)

• \tupdate and promulgate account security policies, procedures, standards & guidelines and compliance to all FM and subcontractor personnel;

• \tOperational oversight of all FM and 3rd party leveraged security services;

• \tPeriodic reporting to ITSM of current risk status gathered from numerous operational reports from the environments supported by NCS. Information security issues transcend the boundaries of discrete operational areas and requires that this information be presented within a number of broad best practice security categories: i.e. Threat, Vulnerability, Compliance and Incident Management.

• \tThese reports include:

• \tVMS (Nessus) reports

• \tMonthly security log review service

• \tMonthly security reporting Service

• \tQuarterly privilege access review service

• \tMonthly Imperva DAM

• \tMonthly Carbon Black

• \tAntivirus Report

• \tACISO Scorecard (Patch Management, Asset Management)

• \tAccount Review

• \tAsset inventory EOL, EOS and EOSL.

• \tABLR Onboarding