Information Security Analyst

Benefits: HSA & FSA401(k)401(k) matchingDental insuranceEmployee discountsHealth insurancePaid time offTuition assistanceVision insuranceWellness resources Description At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued. We are seeking an experienced Information Security Analyst to join our IT Security team and help protect the systems that support our mission. This role monitors, evaluates, and maintains the safeguards for information systems, networks, databases, and web-based assets across on-premises and AWS cloud environments, and produces reporting on risk, vulnerability management, and security incidents. Responsibilities Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediationRecognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary informationEvaluate firewall change requests and assess organizational riskCommunicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systemsAssist with implementation of countermeasures or mitigating controlsDevelop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment toolsMaintain PCI-DSS certification for the IT system on an annual basisSafeguard the network against unauthorized infiltration, modification, destruction, or disclosureResearch, evaluate, test, and implement new security software or devicesConduct investigations of information systems security violations and incidents, reporting to management as necessaryImplement, enforce, communicate, and develop security policies and plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programsPerform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine complianceAdvise management on the business impact of theft, destruction, alteration, or denial of access to informationProvide information assurance project management, technical security staff oversight, and development of mission-critical technical documentsEnsure compliance with regulations and privacy lawsDevelop materials for computer security education/awareness programsRespond to queries and requests for computer security information and reportsMay serve as a team or task lead Requirements Bachelor’s degree (BA/BS) or equivalentMinimum 10 years of IT Security experienceStrong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53 Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security toolsKnowledge of best practices for designing and implementing secure network architecture2+ years of AWS experience (required)Experience with security incident handling (preferred)Clear written and oral communication skillsAbility to troubleshoot and solve complex technical problems Required Certifications Current certification in one or more of the following:ISACA – Certified Information Systems Auditor (CISA)ISACA – Certified Information Security Manager (CISM)(ISC)² – Certified Information Systems Security Professional (CISSP)(ISC)² – Certified Cloud Security Professional (CCSP)AWS Solutions Architect DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.