### Job_Dedcrip:
Information Security Analyst - Senior.Location: DOJ 4Con Office – 150 M Street NE, Washington, DC.Department: Department of Justice (DOJ) TAX Division.Type: Full Time.Minimum Experience: Experienced.Security Clearance Level: Ability to pass a DOJ Background Investigation and Public Trust Clearance.*The clearance level stated above must be met for consideration for this specific opportunity. Unfortunately, FTC is unable to sponsor at this time..Military Veterans and individuals with disabilities are encouraged to apply!..Favor TechConsulting, LLC (FTC) is seeking a talented Senior Information Security Analyst with extensive government experience and the Department of Justice experience..Essential Duties & ResponsibilitiesRole Overview: FTC supports the Department of Justice, Tax Division by providing IT Support and IT Security services.  This position will be part of a team responsible for providing support Information Security Analyst (ISA) serves as the principal advisor to the Information System Owner (SO), in relation to all matters (technical and otherwise) pertaining to the security of the assigned information system. To develop, implement, assess and maintain the appropriate system-level information system security controls in accordance with Department of Justice, NIST 800-53 (as amended), federal government-wide laws regulations, policies, procedures, and standards. Conduct enterprise-wide IT systems security reviews, audits, vulnerability assessments, risk assessments and evaluations regarding compliance with security requirements in accordance with industry best practices and applicable government regulations, standards and guidance to ensure that cloud, applications, systems, networks, data and users adhere to systems security policies, procedures and FISMA regulations.Responsibilities:Assist with reviewing and evaluating recommendations on the court's technology security program, including automation, telecommunications, and other technology utilized by the Tax and Department of JusticeCoordinate with Tax and other Department of Justice personnel, facilities staff and outside vendors to execute planned course objectiveAssist with promotion and support security services available throughout the Tax and Department of JusticeAssist in the development and maintenance of local court unit security policies and guidance, the remediation of identified risks, and the implementation of security measuresMake recommendations regarding best practices and implement changes in policyProvide security analysis of IT activities to ensure that appropriate security measures are in place and are enforced. Conduct security risk and vulnerability assessments of planned and installed information systems to identify weaknesses, risks, and protection requirements.Take measures to remediate identified vulnerabilitiesAssist with the identification, implementation, and documentation of security safeguards on information systems. Assist with information security projects (or security-related aspects of other IT projects)Serve as a liaison with court stake holders to integrate security into the system development lifecycle. Educate project stakeholders about security concepts and create supporting methodologies and templates to meet security requirements and controlsRecommend changes to ensure information systems' reliability and to prevent and defend against unauthorized access to systems, networks, and dataAssist with the creation and employment of methodologies, templates, guidelines, checklists, procedures, and other documents to establish repeatable processes across the courts' information technology security servicesAssist with establishing mechanisms to promote awareness and adoption of security best practicesPerform other routine IT administration duties as assigned by the Systems Manager..Required Skills & ExperienceThree years of hands-on experience providing technical support on an enterprise environment with over 600 users using configuration management tools like Microsoft SCCM ,Crowdstrike, WSUS, IBM BigFix, ForeScout, Tenable Nessus scanner, etc.Three years of experience being responsible for the deployment, maintenance, and use - or evaluation - of industry-standard information security technology products (such as IDS/IPS, SIEM/SEM, VPN, Splunk, forensic tools, and/or vulnerability management, compliance, penetration testing solutions)Ten years of experience with Microsoft Windows client operative system scripting, deployment and troubleshooting, and COTS installation and troubleshooting.Ten years of experience in a network environment performing computer security activities such as incident analysis and response, threat analysis and mitigation, vulnerability assessment, or computer forensicsSolid writing and verbal communication skills to present information at different organization levelsAbility to clearly communicate technical concepts to both technical and non-technical audiencesAbility to manage multiple high priority projects simultaneouslyAzure certifications (Azure Security Engineer or Azure Architect) are required. CISSP is desiredProfessional Certification(s):N/AFormal Education:Technical degree or Bachelor’s Degree in computer science, information systems, engineering, or related field. Experience can be substituted for degree.Years of Professional Experience:10+ years..Desired Skills & ExperienceHands-on experience with Splunk, Tennable, Crowdstrike, Varonis,Leadership in Security and Vulnerability Management teamsScripting and automation experience in enterprise environmentsProfessional Certification(s):CompTIA Security+, CISSP, Certified Authorization Professional (CAP), Certified Ethical Hacker (CEH) or Security+, Certified Information Systems Manager (CISM)Formal Education:Technical or College Degree preferably in an IT Security fieldYears of Professional Experience:10+ years of relevant experience..Required Technical/Business Tools ExperienceIBM BigFixCISSPCAPCEHCISH..Additional Information:.Favor TechConsulting (FTC) is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, marital status, disability, veteran status, sexual orientation, or genetic information..FTC requires all employees to be fully vaccinated as a condition of employment unless legally entitled to an accommodation. If you receive an offer of employment, it will be made contingent upon satisfaction of this requirement, and you will be required to show proof that you are fully vaccinated or to promptly engage in an interactive process to allow Human Resources to evaluate potential reasonable accommodations for valid medical or religious reasons. Please do not provide information about whether you are seeking an exemption from the vaccination requirement unless and until you receive a conditional offer of employment from FTC..U.S Citizenship is required for this specific opportunity and all selected applicants will be subject to a government security investigation. This includes but is not limited to; meeting the eligibility requirements for access to classified information and the ability to obtain a government-granted security clearance. Individuals may also be subject to a background investigation including, but not limited to; criminal history, employment verification, education verification, drug testing, and creditworthiness.

### Response:

Job Requirements:- Ability to pass a DOJ Background Investigation and Public Trust Clearance- Three years of hands-on experience providing technical support on an enterprise environment with over 600 users using configuration management tools like Microsoft SCCM, Crowdstrike, WSUS, IBM BigFix, ForeScout, Tenable Nessus scanner, etc.- Three years of experience being responsible for the deployment, maintenance, and use - or evaluation - of industry-standard information security technology products- Ten years of experience with Microsoft Windows client operative system scripting, deployment and troubleshooting, and COTS installation and troubleshooting- Ten years of experience in a network environment performing computer security activities such as incident analysis and response, threat analysis and mitigation, vulnerability assessment, or computer forensics- Solid writing and verbal communication skills to present information at different organization levels- Ability to clearly communicate technical concepts to both technical and non-technical audiences- Azure certifications (Azure Security Engineer or Azure Architect) are required. CISSP is desired- Technical degree or Bachelors Degree in computer science, information systems, engineering, or related field. Experience can be substituted for degree- IBM BigFix, CISSP, CAP, CEH, CISM certifications are desired- U.S Citizenship is required for this specific opportunity and all selected applicants will be subject to a government security investigation.