Defense contractor involved with product development and manufacturing of various systems for military aerospace and vehicles in the Los Angeles International Airport area. With a 50+ year foundation, The Marvin Group supports all branches of the Department of Defense and allies around the globe on an array of programs and platforms. We support many military prime contractors including Lockheed Martin, Northrop Grumman and Raytheon.

The Information Security Analyst V at the Marvin Group will be responsible for implementing, monitoring, and protecting the organization from all vectors of cyber-attacks including and not limited to network, hardware, software, cloud, E-Mail, insider threat and other forms of potential infiltrations and hackers. This position requires the analyst to actively develop protocols used to respond to and quell cyberattacks. The ideal Information Security Analyst V has experience in DOD Security Practices, Endpoint Security, Network Security, and experience using industry tools designed to keep an organization safe.

Scope

Active team member in the Information Security team with focus on ensuring that the Marvin Group deepens and retains a best-in-class security posture. Engages with team members and all employees to ensure all security policies and procedures are supported and implemented as designed. Participates in the planning, implementation, and documentation to ensure the Marvin Group achieves and maintains CMMC Certification status.

Responsibilities

• Safeguards information system assets by identifying and solving potential and actual security problems.

• Protects system by defining access privileges, control structures, and resources.

• Recognizes problems by identifying abnormalities, reporting violations.

• Implements security improvements by assessing current situation, evaluating trends, and anticipating requirements.

• Determines security violations and inefficiencies by conducting periodic audits.

• Upgrades system by implementing and maintaining security controls.

• Keeps users informed by preparing performance reports, communicating system status.

• Maintains quality service by following organization standards.

• Maintains technical knowledge by attending educational workshops, reviewing publications, subscribing to industry cyber alert publications.

• Contributes to team effort by accomplishing related results as needed.

Knowledge, Skills, and Abilities

• Information security policies

• System administration

• Script and Qry Knowledge (PowerShell, Python, Shell Scripting, YARA, Kusto, etc.…)

• Network security

• Endpoint security

• Problem solving

• Exercises good judgement

• On-call network troubleshooting

• Network protocols

• Process improvement

Education and Experience

• Bachelor’s degree in Computer Science, Information Systems, or equivalent education or work experience

• 5+ years of prior relevant experience

• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.

• Hands-on experience analyzing high volumes of logs, network data (e.g., NetFlow, FPC), and other attack artifacts in support of incident investigations

• Hands on experience with Endpoint Security Tools (Cylance, ESET, Cofense)

• Experience with Microsoft Security Solutions (Defender, MIP/AIP, Intune)

• Experience with vulnerability scanning solutions

• Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., Sentinel, Nitro/McAfee Enterprise Security Manager, ArcSight, QRadar, Log Logic, Splunk)

• Experience developing and deploying signatures (e.g., YARA, Snort, Suricata, HIPS)

• Understanding of mobile technology and OS (i.e., Android, iOS, Windows), VMware technology, and Unix and basic Unix commands

Highly Desirable Experience

• Practical experience with policy and regulatory mandates such as NIST Risk Management Framework and associated standards such as sp800-171, FedRAMP, CMMC, etc.

• Familiarity with the DOD Information Assurance Vulnerability Management program.

• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification

• Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent) at start date

This position must meet export control compliance requirements. All applicants must be “U.S. persons” within the meaning of ITAR, as defined: a U.S. Citizen, a lawful permanent resident, political asylee, or refugee.

Interested parties please apply online and submit resume to http://jobs.marvingroup.com

Visit us at marvingroup.com

The Marvin Group is an EEO/AA/Disability/Vets Employer.

Our company uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify.

If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Human Resources at 424.318.4119

The Marvin Group

New Jobs

INFORMATION SECURITY ANALYST V