Description

PingWind is seeking a highly skilled and experienced Information Assurance Engineer to join our dynamic team. As an Information Assurance Engineer, you will be responsible for ensuring the security and integrity of our organization’s information systems and data.

Location: Fort Knox centric (REMOTE)

Required Clearance: Secret

Required Education: Bachelor’s Degree in relevant field.

Required Experience: Five+ (5+) years of experience as an Information Assurance Engineer

· Supports monitoring of all Information Assurance Devices (IADs) to identify and document all intrusions and attempted intrusions.

· Populates and maintains an intrusion database and provides data analysis support.

· Analyzes data from sensors, network security devices, and applications using the security information event management systems, log servers, application interfaces, and device consoles provided.

· Documents evidence of system security compromise, generates trend reports, and collects evidence of malicious or anomalous activity.

· Reports security incidents and/or network intrusions to Incident Handlers for dissemination to appropriate points of contact.

· Identifies anomalous and malicious activity. Contributes to content creation, prioritize, rank, and escalate incidents.

· Assist in producing status reports and briefs to senior leadership; provide analysis for correlated information sources.

· Deploy and configure security technologies, tools, and measures to safeguard information systems.

· Conduct regular security assessments and vulnerability scans to identify and address potential weaknesses.

· Respond to and investigate security incidents, including analyzing and mitigating the impact of security breaches.

· Develop and enforce security policies, standards, and guidelines to ensure compliance with industry regulations and best practices.

· Provide training and awareness programs to educate employees about security risks and best practices.

· Manage access controls and permissions, ensuring that only authorized personnel have access to sensitive data and systems.

· Monitor security logs and alerts to detect and respond to security events in a timely manner.

· Ensure compliance with relevant laws, regulations, and organizational policies related to information security.

· Assess and manage risks associated with information systems, identifying, and implementing risk mitigation strategies.

· Work closely with other IT teams, stakeholders, and third-party vendors to address security concerns and implement effective security measures.

CISSP, CISM

· Security+