Systems Security Analyst

San Antonio, TX, United States

Why WWT?

At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits and by delivering cutting-edge technology solutions for our clients.

WWT was founded in 1990 in St. Louis, Missouri. We employ more than 10,000 people globally and closed nearly $20 billion in revenue in 2023. We have an inclusive culture and believe our core values are the key to company and employee success. WWT is proud to have been included on the FORTUNE "100 Best Places to Work For" list 12 years in a row!

Want to work with highly motivated individuals on high-performance teams? Join WWT today!

Why should you join the Government Services team?

Our Government Services team provides cleared resources with a global reach to federal civilian, Department of Defense (DoD) and intelligence community markets. We excel at delivering innovative, operationally ready, and cost-effective IT solutions that accelerate the interoperability and resiliency of mission critical systems.

Want to learn more about Government Services? Check us out on our platform:

https://www.wwt.com/public-sector

https://www.wwt.com/government-services

Location: San Antonio, TX

Clearance Needed: TS/SCI

What will you be doing?

The Systems Security Analyst will be responsible for the analysis and development of the integration, testing, operations, and maintenance of security systems.

RESPONSIBILITIES:

Assess the effectiveness of security controls.

Apply security policies to meet security objectives of the system.

Assess all the configuration management (change configuration/release management) processes.

Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.

Analyze and report organizational security posture trends.

Analyze and report system security posture trends.

Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.

Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.

Assess adequate access controls based on principles of least privilege and need-to-know.

Implement security measures to resolve vulnerabilities, mitigate risks and recommend security changes to system or system components as needed.

Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.

Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative.

Verify minimum security requirements are in place for all applications.

Plan and recommend modifications or adjustments based on exercise results or system environment.

Properly document all systems security implementation, operations and maintenance activities and update as necessary.

Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.

Verify and update security documentation reflecting the application/system security design features.

All other duties Cyber security duties as defined by CSSP.

QUALIFICATIONS:

2-6 years' experience in Cyber Security/IT

Bachelor's Degree or Higher in Cybersecurity or related field

Security Clearance: Top Secret/SCI with potential for higher read-ins.

Must be 8570 IAT II certified (Security+)

Must be CSSP Analyst Certified within 90 days of on-boarding. One of the following Certs: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+/CSA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+.

Security Clearance: Top Secret/SCI with potential for higher read-ins.

Must be 8570 IAT II certified (Security+)

Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).

Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).

Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).

Knowledge of operating systems.

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).

Knowledge of how system components are installed, integrated, and optimized.

Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).

Knowledge of various types of computer architectures.

Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.

Knowledge of how to use network analysis tools to identify vulnerabilities.

Skill in designing the integration of hardware and software solutions.

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in developing and applying security system access controls.

Skill in evaluating the adequacy of security designs.

Skill in assessing security systems designs.

Skill in assessing security controls based on cybersecurity principles and tenets.

All other cybersecurity duties as defined by the CSSP.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

Health and Wellbeing: Heath, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program

Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement

Paid Time Off: PTO Holidays, Parental Leave, Sick Leave, Military Leave, Bereavement

Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

Equal Opportunity Employer Minorities/Women/Veterans/Individuals with Disabilities

#J-18808-Ljbffr