IT Security Analyst Resume Samples

Description :

1. Information security system policies, plans, and  baselines were developed and reviewed.
2. Provided security expertise and guidance in support of security assessments.
3. Reviewed authorization documentation for completeness and accuracy for compliance.
4. Ensured cyber security policies are adhered to and that required controls are implemented and facilitated continous monitoring system.
5. Implemented and checked information system security plans to ensure Nist control requirements are met.
6. Developed sca documentation and Authored recommendations associated with findings on how to improve the customer's security posture in accordance with nist controls.
7. Worked hand in hand with the team to have a proper artifact collection and brief to clients examples of artifacts that will satisfy assessment requirements.
8. Reviewed security logs to ensure compliance with policies and procedures and identifies potential anomalies.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Supported client security policies and activities for networks, systems, and applications including vulnerability management, incident reporting, mitigation, and continuous monitoring.
2. Worked on all assessment and authorization (a&a) phases and processes.
3. Proven ability to support the full life-cycle of the assessment and authorization (a&a) process.
4. In accordance with Nist, Fisma, OMB app reviewed and updated the Information system security policies. Used Iii a-130 and industry best security practices.
5. Solved unique and complex problems with broad impact on the business.
6. Provided time estimates at various levels of confidence for tasks from initiation through development.
7. Identify dependencies across programs, milestones, systems, and solutions.
8. Recommended it security improvements, to achieve systems confidentiality, integrity, and availability.

Experience

5-7 Years

Level

Senior

Education

BS

Description :

1. Responsible for end to end security, ensuring that the confidentiality, integrity and availability of all Sports authority data is not breached, infected or compromised in anyway by outside malicious users.
2. By utilizing a defense in depth approach and identifying areas of potential weakness.
3. Primary IT security lead on high profile integration and implementation projects. Many of these projects helped generate cost effective, automated solutions that required ground up security architecture,.
4. Performed full application security assessments and analysis on newly built and existing applications.Because of these efforts, many potential security threats were identified before being released into a production environment.
5. Existing production security vulnerabilities were promptly remediated upon discovery, thus greatly reducing the overall security risk within sports authority.
6. Continuous monitoring of the sports authority network and internal systems for malicious activity.
7. Numerous attacks and security threats targeted at company have been prevented because of these efforts.

Experience

0-2 Years

Level

Entry Level

Education

Business

Description :

1. Provided security expertise and guidance in support of security assessments.Reviewed authorization documentation for completeness and accuracy for compliance.
2. Executed examine, interview, and test procedures in accordance with nist sp 800-53a revision 4.Ensured cyber security policies are adhered to and that required controls are implemented.
3. Validated information system security plans to ensure nist control requirements are met.
4. Developed resultant sca documentation, including but not limited to the security assessment report (sar).
5. Assisted team members with proper artifact collection and detail to clients examples of artifacts that will satisfy assessment requirements.
6. Reviewed security logs to ensure compliance with policies and procedures and identifies potential anomalies.
7. Updated and reviewed a&a packages to include core docs, policy & procedures, operations and maintenance artifacts, ssp, sar, fips 200, fips 199, poa&m, cptpr, bia, pta, pia, and more.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Conducted security control assessment to assess the adequacy of management, operational privacy, and technical security controls implemented. Security assessment reports (sar) were developed detailing the results of the assessment along with plan of action and milestones (poa&m).
2. Developed risk assessment report to identify threats and vulnerabilities applicable to smart think systems. This report also evaluates the likelihood of vulnerability being exploited, assesses the impact associated with these threats and vulnerabilities, and identified the overall risk level.
3. Assist in the development of an information security continuous monitoring strategy to help in maintaining an ongoing awareness of information security.
4. Ensure effectiveness of all security controls, vulnerabilities, and threats to support organizational risk management decisions.
5. Lead in the development of privacy threshold analysis (pta), and privacy impact analysis (pia) by working closely with the information system security officers (issos), the system owner, information owners and the privacy act officer.
6. Develop a system security plan to provide an overview of federal information system security requirements and describe the controls in place or planned to meet those requirements.
7. Responsible for the development of key security standards by performing an in-depth security assessment of information systems in order to maintain fisma compliance by implementing guidelines and standards identified in the national institute of standard and technology (nist) 800 series in facility.

Experience

7-10 Years

Level

Executive

Education

BA

Description :

1. Managed process and acted in the lead role for computer security incident response team. Perform and develop procedures for system security audits, network penetration-test, and vulnerability assessments on os, server, database, and other applications.
2. Assess threats, risks, and vulnerabilities from emerging security issues and advise pertinent stakeholders on appropriate measures. Conducting, managing and tracking pci vulnerability assessments using acunetix, nessus and qualys web vulnerability tools.
3. Undertaking it security compliance policies framework reviews (e. G. Iso 27001/2, nist, sox cobit, hipaa etc. ) for various it platforms. Develop and interpret it security policies, technical security standards, security operating procedures and processes for various technologies to stakeholders.
4. Maintaining risk security awareness and solutions to ensure updates within departments on a regular basis.
5. Conducting it audit assessments for systems or applications as required, and recommend solution on how to mitigate risk.
6. Maintain and create and operate a schedule of vulnerability scanning, including business co-ordination with it stakeholders. Establish vulnerability scanning resolution on server, cloud and desktop environments.
7. Collaborate with infrastructure team to analyse possible infrastructure security incidents to determine an event is fit as a legitimate security breach. Monitoring and analysing networking traffics with wireshark to resolve downtime.

Experience

2-5 Years

Level

Junior

Education

MSC

Description :

1. Developed, reviewed, and updated information security system policies, system security plans, and security baselines in accordance with nist, fisma, omb app. Iii a-130 and industry best security practices.
2. Applied appropriate information security control for federal information system based on nist 800-37 rev1, sp 800-53, fips 199, fips 200 and omb a-130 appendix iii.
3. Provided security expertise and guidance in support of security assessments. Review, analyze and evaluate business system and user needs, specifically in authorization and accreditation (a&a).
4. Facilitated security control assessment (sca) and continuous monitoring activities. Executed examine, interview, and test procedures in accordance with nist sp 800-53a revision 4.
5. Ensured cyber security policies are adhered to and that required controls are implemented. Validated information system security plans to ensure nist control requirements are met.
6. Developed resultant sca documentation, including but not limited to the security assessment report (sar). Reviewed security logs to ensure compliance with policies and procedures and identifies potential anomalies.
7. Updated and reviewed a&a packages to include core docs, policy & procedures, operations and maintenance artifacts, ssp, sar, fips 200, fips 199, poa&m, cptpr, bia, pta, pia, and more. Collected operation and maintenance artifacts on an ongoing basis so that security control assessment (sca) is seamless.

Experience

7-10 Years

Level

Consultant

Education

BS

Description :

1. Conducting meetings with the it team to gather documentations and evidences (kick-off meeting) about the control. Developing and maintaining plan of action and milestones (poa&ms) to remediate findings and get an ato.
2. Conducting assessment of controls on information systems by interviewing, examining and testing methods using nist sp 800-53a as a guide.
3. Creating, updating and reviewing system security plans using nist 800-18, contingency plans using nist 800-34, incident reports using nist 800-61.
4. Conducting risk assessments regularly; ensured measures raised in assessments were implemented in accordance with risk profile, and root-causes of risks were fully addressed following nist 800-30 and nist 800-37.
5. Conducting fisma-based security risk assessments by interviews, tests and examining of facts. Supporting clients in creating a memo for findings that has passed scheduled completion date.
6. Perform comprehensive security control assessment (sca) and prepare report on management, operational and technical security controls for audited applications and supporting clients in creating risk base decision (rbd) for plan of action and milestones (poa&m).
7. Reviewing and updating security artifacts such as system security plan (ssp), security assessment report (sar), security assessment plan (sap), contingency plan (cp), privacy impact assessment (pia), and plan of actions and milestones (poa&m).

Experience

2-5 Years

Level

Junior

Education

BS

Description :

1. Performed security assessment of various web applications using burp suite, zap proxy and nessus.
2. Performed security event monitoring of heterogeneous network architecture solutions using mcafee enterprise security manager, mcafee security suite of products such as mcafee endpoint encryption, mcafee dlp - device control, mcafee epo management, mcafee antivirus and anti-malware.
3. Performed application white listing using carbon black which is considered the best endpoint security device by many security professionals.
4. Performed vulnerability assessment of various online applications to identify the vulnerabilities in input data validation, session management, authentication, authorization, auditing and logging.
5. Performed security assessment on the applications, web sites, web applications to determine the security posture.
6. Coordinated with development team to ensure closure of reported vulnerabilities by explaining the ease of exploitation and impact of the issue.
7. Prepared reports with security breaches and the extent of the damage caused by the breaches to brief higher management and also clients.

Experience

7-10 Years

Level

Senior

Education

CS

Description :

1. Provided security expertise and guidance in support of security assessments.
2. Participated in weekly IT security team meetings to provide guidance and support for the development of enterprise security architecture.
3. Executed examine, interview, and test procedures in accordance with nist sp 800-53a revision 4. Ensured cyber security policies are adhered to and that required controls are implemented.
4. Validated information system security plans to ensure nist control requirements are met. Developed resultant sca documentation, including but not limited to the security assessment report (sar).
5. Assisted team members with proper artifact collection and detail to clients' examples of artifacts that will satisfy assessment requirements.
6. Reviewed security logs to ensure compliance with policies and procedures and identifies potential anomalies.
7. Made input in data calls to ensure it security projects are on track. Worked with systems and network administrators to develop implementation statement for security controls.

Experience

2-5 Years

Level

Junior

Education

BS