This position is 100% on-site in Columbia, SC; The Consultant must be located in Columbia, SC, during this contract.
Our direct client has an opening for a Security Analyst -11109-1 This position is 12 months, with the option of extension, and is in the following locations in Columbia, SC
CCNA Security or equivalent (network security-centric) certification is required
SCOPE OF THE PROJECT: The Office of Cybersecurity is tasked with ensuring the confidentiality, integrity and availability of SCDHHS systems and services. A strong candidate for this position should possess HANDS-ON experience in the following: • Data network design and engineering best practices • Strong understanding of routing and switching protocols • Network security best practices • On-premise and cloud networking experience
DAILY DUTIES / RESPONSIBILITIES: This is a HANDS-ON Role
The Network Security Analyst will report to the Office of Cybersecurity SOC Lead and operate as an experienced consultant to SCDHHS leadership, business units, business partners and vendors.
Security Program Experience: Experience with CMS MARS-E, HIPAA or other FISMA Risk Management Framework (RMF) compliant programs is strongly desired and will be given the highest weight. Experience must include well documented success in the performance of security focused processes and procedures supportive of a secure, compliant enterprise architecture.
Experience in security as related to multi-tenant, cloud services and vendor interface management would be considered desirable for this position.
Technical Experience: HANDS-ON experience with any or all of the following would be considered a desirable for this position:
Essential Responsibilities:
Assist (and often lead) in the design, development, implementation and/or ongoing maturation of SCDHHS network security and compliance solutions
This position focuses on leading network security assessments against proposed firewall and network infrastructure
Provide technical analysis in network security planning, engineering, and design
Review and assess connectivity and firewall rule requests to ensure they do not present an elevated risk to the Agency, full reviews performed, proper due diligence performed, and proper mitigating controls are put in place
Perform continuous analysis of on-premise and cloud security networks to identify potential threats to the agency
Perform daily analysis and response of alerts generated from network centric platforms
Develop, review, and analyze network traffic reports that violate the agency’s approved standards governing Ports, Protocols and Services.
Awareness of new threat vectors and make recommendations for improved security countermeasures
Collaborate with other areas of the agency to implement countermeasures to detect and prevent adversarial attacks
Assist in developing and designing solutions for enhancements/projects needing network changes in both on-premise and cloud environments
Monitor security systems and reports to maintain compliance with multiple regulations such as MARS-E, SCDIS-200, and HIPAA
Create and assist with managing KPI reports that can be used to identify trends and establish metrics
Perform network security configurations and rules recertification to ensure that the firewall configurations and rulesets meet the business and compliance requirements
Provide direction to infrastructure teams, end-user support, application teams, and business units on best security practices
Other duties may be assigned within the Security Operations
REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
REQUIRED EDUCATION/CERTIFICATIONS:
Verbal Communication Skills Yes 4 Written Communication Skills Yes 4 Bachelor of Science Degree Yes 2 Technical Certifications Yes 1 Demonstrated knowledge/skills of the IT industry which includes: multi-tiered architectures, enterprise applications, evaluation of emerging technologies, networks, data management systems and hardware systems. Yes 1 IT Security Yes 1 Security Security Information Architecture Yes 3 Federal Information Security Management Act (FISMA) No 1 HIPAA Security No 6 MARS-E No 6 Network Administration Yes 1 Network security Yes 2 Microsoft Office Suite Yes 5 Medicaid or healthcare experience No 5
Additional Skills: REQUIRED EDUCATION/CERTIFICATIONS:
Criminal Record - 7 Year History Candidate Confirmation E-Verify Candidate Confirmation Credit Report - 7 Year History Candidate Confirmation DHHS - Confidentiality Agreement Candidate Confirmation