Job Description
Amida Technology Solutions is a DC-based technology company focused on solutions for data interoperability, data utility, and data security. We create open-source solutions that collect, reconcile, transform, and standardize data for business intelligence, predictive analytics, decision support, and user transactions. We specialize in taking data from inception to impact.
Our team is comprised of creative, forward thinkers who are passionate about using cutting edge technology to make a difference in people's lives and have a positive impact on our country. We offer an entrepreneurial, high growth environment that values fresh ideas, candid conversations, and authentic teamwork.
Amida is currently looking for a Cyber Security Analyst to join our team in Washington, DC. In this role you will work across our client engagements, implementing protocols, and providing practical solutions to keep our clients ahead of potential threats. You will be responsible for implementing the Risk Management Framework, identifying vulnerabilities and threats, helping clients choose tools and services that will lower information security risk, and ensuring that incidents are caught early and managed well.
What you will be doing:
- Implement the cybersecurity requirements of systems and applications, documenting them in formal security engineering documents using the Risk Management Framework and supporting artifacts associated with risk assessments.
- Perform security analyses to determine gaps, compensating/mitigating controls, and residual risk.
- Identify security risks through security impact analysis and system risk assessments.
- Implement IT security solutions and assure successful implementation.
- Conduct security compliance evaluations on IT products using all-source analysis, test lab, and apply test results to create security configuration guidelines and baselines.
- Analyze results from security evaluation tools such as Tenable Nessus, Nmap, Wireshark, and Metasploit.
- Assess operating system and security configuration guidelines into images for IT product's initialization and deployment within the infrastructure.
- Apply knowledge of security principles, policies, and regulations to address specific client challenges.
What we are looking for:
- Bachelor's Degree in Computer Science, Engineering, Information Security or a related discipline or at least six years of equivalent work experience in lieu of degree
- At least eight years of related experience, including experience with networking concepts, protocols and security methodologies, and knowledge of the Risk Management Framework (RMF) and Assessment and Authorization (A&A) process
- Prior experience using network security scanners, SCAP scans, vulnerability scanners, packet analyzers, and penetration testing methods
- Prior experience in the administration/engineering of operating systems, database systems, and/or network systems
- Expert technical knowledge of risk management, and information security concepts and technologies
- Experience with cybersecurity document management and familiarity with security and privacy rules
- Excellent written and verbal communication skills, particularly as they relate to preparing and delivering client reports and briefings
- Excellent analytical and problem-solving skills
- US Citizenship with the ability to obtain a Public Trust security clearance
- Self-starter who can work under general direction in a highly collaborative, team-based environment
Pluses:
- Master's Degree in Computer Science, Engineering, Information Security or a related discipline
- One or more of the following certifications: CISSP, CEH, Security +, CCSP, ISSEP
- Previous government contracting experience a plus
NKZnSr4KAz