Information Security Analyst

Summary

We are looking for an Information Security Analyst to join our team. At this midlevel position you will be planning and carrying out security features to protect the business’ computer networks and systems.

Duties include resolving all operational problems associated systems maintained in the environment. Tracking work tickets to document work and serve as first response on IT issues, take action, contact necessary personnel and document any notable response in ETMS.

Who we are

You’ll be working for the Wright Paterson Medical Center, which is part of the 88th Medical Group, one of the largest Air Force Military Treatment Facilities providing primary and specialty care to over 58,000 eligible beneficiaries. We are a major military/civilian integrated platform with many formal programs in advanced specialty training of physicians, nurses, and technicians.

You’ll be working with and assist government employees to interface with MESD/DHA, FDA and 88CG to maintain resources. Our network encompasses 7 buildings through the Wright-Patterson Base Metropolitan Area covering over 2,500 users

Position is fully on-site at Wright Paterson Medical Center.

Responsibilities

• Implement the cyber system security program and requirements of an Air Force Medical Center.
• Enforce compliance with applicable DOD and DHA Cybersecurity policies.
• Example: DISA Security Technical Implementation Guide (STIG)
• Utilize Enterprise Management/Tracking Systems (EMTS) queues for troubleshooting and resolving all operational problems associated systems maintained in the environment.
• Follow guidance from DoD Directive 8500.1 Information Assurance (IA) and AFMAN 17-1301 Computer Security (COMPUSEC) to protect all Information Systems (IS) resources and information.
• Manage COMPUSEC functions of the cyber systems security office.
• Conduct information assurance inspections in the facility providing user education when deficiencies are identified.
• Coordinate security requirements for network access.

• Review System Authorization Access Requests (SAAR) for accuracy and route for processing.
• Manage and Monitor Endpoint security applications.
• Verify installation and configuration of Endpoint Security on all end user devices.
• Monitor logs for events and follow appropriate local and enterprise reporting procedures.
• Use automation case tools to automate vulnerability and patch delivery/remediation and provide a manual means to address vulnerability and patch management where automation cannot be employed.
• Knowledgeable of configuration and use of vulnerability scanning applications
• Ability to apply critical thinking to identify, prioritize, implement, or delegate mitigations to reduce risk.
• Manage the requests for firewall, Telewall, DNS, and Outbound Web Traffic.
• Review requests for Ports Protocols and Services exceptions. (PPSM)

Requirements

• 3-5 verifiable years of related work experience
• Bachelor’s degree in computer science, Programming or Information Assurance
• Sec+ required for elevated permission on DoD IT systems – DODD 8140.01 IAT-II Baseline certification required.
• Must be knowledgeable with the Risk Management Framework (RMF) process for cybersecurity.
• Ability to anticipate potential danger in the systems and suggest new methods to protect our systems that fit within policies.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)