Information Security Analyst Resume Samples

Description :

1. Implementing preventative and detective information security controls to secure the company's data, information, and resources.
2. Conducting a risk assessment to minimize the company's security, financial, and legal exposure.
3. Conducting vulnerability scanning on internal and external systems to identify and mitigate identified vulnerabilities.
4. Monitoring IDs/IPs events log to mitigate malicious or suspicious activities.
5. Monitoring and maintaining the web security gateway, investigating and controlling user and suspicious web activity.
6. Conducting quarterly user access review to maintain strict access control enforcement.
7. Defining, reviewing, and editing the information security policies based on SOX requirements, environmental and operational conditions and changes in technology.
8. Reviewing and investigating the suspicious user, server, database, and application login events.
9. Working with project teams and developers to validate that the applications throughout the SDLC meet the required security specification before approving for deployment.
10. Reviewing and approving the firewall configuration settings on a quarterly basis.

Experience

10+ Years

Level

Consultant

Education

MS

Description :

1. Performing administration (provisioning, de-provisioning, account monitoring, access reviews and authentication support) of the identity and access management lifecycle across all enterprise systems via Sailpoint.
2. Partnering with application developers and it administrators to onboard new applications and systems into the identity and access management platform.
3. Actively monitoring the identity controls and participate in periodic risk assessments to identify compliance issues.
4. Experience with role-based access control, access requests, and certifications.
5. Performing the creation, modification, and deletion of user accounts and their privileges on windows environment using active directory.
6. Set access permission levels to security groups on various applications, network file shares, and servers/desktops.
7. Developing scripts using VBScript to reduce the time consumed in iterative tasks incurred in this process.
8. Handling incidents, incident tasks, change tasks, event tasks, and problem tasks to fix the issues reported Cahelp desk and service-now.

Experience

10+ Years

Level

Management

Education

Bachelor Of Engineering

Description :

1. Participated in information security projects with the goal of performing them on-time, on budget and with the highest quality standards.
2. Ensured that new Tracfone initiatives/projects and Business Change Requests (BCRs) were evaluated for their security impact and that proper security requirements and guidance were provided to maintain the company's security posture.
3. Directly involved in the implementation, daily maintenance, and troubleshooting of Tracfones identity management solution (Oracle Identity Manager).
4. Represented directed the provisioning of users to several applications and evaluated roles for provisioning and produced entitlement reports for periodic review.
5. Represented as the information security group as the information security and technical subject matter expert in meetings with business owners, technical groups, and outside vendors.
6. Ensured that SOX controls pertaining to the information security group were consistently executed to ensure compliance.
7. Assisted in the development and maintenance of information security policies procedures as necessary to address technology changes, business needs, and evolving security threats.

Experience

10+ Years

Level

Consultant

Education

BS

Description :

1. Worked with various Project Managers and lines of business to plan, develop, document, and implement migrating the lob Unix server environment.
2. Gathered information from application support teams to document and present the current access structure, and convert lob requirements into a move forward solution that meets lob goals as well as enterprise remediation goals as required by the project.
3. Defined, and provisioned, approved new access requirement changes in the new domain based on job requirements. (server to server communications, end-user grouping and structuring, and non-human account provisioning).
4. Prepared needed supporting files needed by SA to perform the server migration.
5. Attended and provided support for scheduled migrations representing the Unix enterprise access management (UAM/EAM) team.
6. Addressed any post-migration access issues identified by the lob during post migration testing.
7. Recorded count for privileged access reduction to meet project requirements.

Experience

2-5 Years

Level

Junior

Education

Diploma

Description :

1. Participating in weekly meetings to identify changes within the operation and IT processes to identify areas of risk and define audit plan base on risk assessment methodology.
2. Assisting in updating System Security Plans (SSP) base on the National Institute of Standard and Technology (NIST) SP 800-18 and the conduct of annual self-assessment.
3. Responsible for reviewing, analyzing and evaluating the security controls used to protect the data of the organization.
4. Applying industry standards like ISO, and COBIT to keep risks at an acceptable level within the information system.
5. Developing policy and procedural controls relating to management, operational and technical controls.
6. Conducting audits of network configuration to ensure compliance in organization regulatory standards.
7. Providing expert analysis and advice on systems and programs related to it security problems and provide recommendations.
8. Gathering data to complete Security Test Evaluation (STE) required managing risks and threats in systems.
9. Implementing appropriate security controls to mitigate threats, risks and vulnerabilities in the system.

Experience

2-5 Years

Level

Junior

Education

MS

Description :

1. Auditing all firewall config files and rules using SolarWinds FSM to make sure any changes made have proper approval along with change control documentation.
2. Setting up and maintaining nodes, rules, groups, users and e-mail templates with SolarWindsnds LEM (Log and Event Manager) along with investigating all rules that are fired.
3. Analyzing and reporting vulnerabilities found on Microsoft, Linux and Unix servers along with Cisco routers, firewalls, and switches using QualysGuard vulnerability scanner.
4. Reporting and analyzing company website vulnerabilities using QualysGuard WAS (web application service). 
5. Monitoring and reporting on laptops, desktops, and servers for av definitions and virus issues along with setting policies on what software categories are allowed using the Sophos enterprise console.
6. Implementing Sophos safeguard policies for file encryption, machine settings, device protection, configuration protection and passphrase.
7. Monitoring and reporting on Barracuda WAF along with setting configuration parameters, categories allowed, and specific website blocking.
8. Monitoring attacks on our main website using Imperva Incapsula web application firewall. Setting up rules to block countries, domains, and IPs.

Experience

10+ Years

Level

Management

Education

Certification

Description :

1. Installed the Security Content Automation Protocol (SCAP) software on various computers.
2. Installed new Microsoft and Windows 7 patches, updates, and benchmarks on various machines.
3. Commenced SCAP protocol and reported all findings and vulnerabilities to management for policy compliance evaluation.
4. Followed configuration management checklist in order to assess and manage the configurations of desktops, laptops, and servers.
5. Used configuration management checklists to define and assess security parameters and configurations that are required by organizational policy.
6. Conducted various automated network vulnerability scans, configuration assessments, application vulnerability scans, device configuration assessments, and network discovery on the Assured Compliance Assessment Solution (ACAS) machine.
7. Reported and compiled all data with Information Assurance Vulnerability Alerts (IAVAs).
8. Identified and reported all Information Technology (IT) security violations.

Experience

2-5 Years

Level

Entry Level

Education

Associates

Description :

1. Served as the IT risk management Subject Management Expert (SME) on various projects, as needed.
2. Worked with business units to assess the impact of strategic business directions on information security threats, vulnerabilities, and risks.
3. Documented, audited and reported on security compliance with the business units and information security management.
4. Responsible for building and updating views within select modules and coordinating with other administrators regarding the changes proposed or implemented.
5. Designed and created management reports and views within select EGRC modules.
6. Added, modified, removed fields, cross-mapped fields from other modules, and created calculated fields.
7. Assisted in the implementation, design, and development of the Archer SmartSuite framework.
8. Managed Archer GRC software by troubleshooting, coding, scripting, and workflow design.
9. Redesigned the vulnerability management program to create working dashboards, streamline exception process and tracked trending metrics against vulnerability standard.

Experience

10+ Years

Level

Management

Education

BS

Description :

1. Executed 6-month detail as a liaison between the office of electric reliability and the office of the Executive Director to ensure cybersecurity efforts are integrated internally and with other parts of the federal energy regulatory commission.
2. Reviewed 2009 through 2017 Federal Information Security Management Act (FISMA) requirements and associated controls and made recommendations for improvements that are being adopted as 2017 it governance and information assurance initiatives.
3. Designed and implemented 2017 commission-wide anti-phishing training and user awareness campaign.
4. Composed 2017 Statement of Work (SOW) as part of a Request for Proposal (RFP) to solicit bids from external vendors to perform threat, vulnerability, and penetration testing on the commission's network.
5. Reviewed and made recommendations for accreditation, authorization, and authority to operate for cloud service providers.
6. Reviewed, made changes, and developed new Standard Operating Procedures (SOPs) for daily Security Operations Center (SOC) operations.
7. Reviewed weekly Department of Homeland Security (DHS) / National Cybersecurity Assessments and Technical Services (NCATS) cyber hygiene assessments to identify known vulnerabilities detected on internet-facing hosts.
8. Performed weekly evaluation of Nessus scan on all public facing IP addresses for vulnerabilities and coordinated with IT operations and systems engineering groups to develop plans of action and milestones and remediated vulnerabilities.

Experience

7-10 Years

Level

Management

Education

MS

Description :

1. Leading security certification project to achieve/maintain required compliance for the organization.
2. Verification of company policies, procedures, and controls in accordance with ISO 27001, ISO 9001, 14001 and PCI standards.
3. Collecting, reviewing and organizing pci and iso documentation and supporting evidence required for certification and/or attestation.
4. Responsible for identifying it security gaps in internal policies, guidelines and/or procedures.
5. Auditing the existing processes and documentation in order to identify opportunities for improvement.
6. Establishing relationships and build trust with internal and external security stakeholders.
7. Managing relationship with certification body in an effort to and conduct all audit scheduling, financial and administrative activities.
8. Overseeing performance evaluation committee responsible for the collection, review, and analysis of information security metrics.
9. Revamped the information security management system by streamlining the management review process, continuous improvement process, and interested party communications.

Experience

7-10 Years

Level

Senior

Education

BS