Keith Cassant, MAOL, SPHR, CEH’s Post

#hiring *Security Control Assessor (SCA) III*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/g4iWdRQN The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities.Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility.Performance shall include:Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructurePerform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)Advise the Information System Owner (ISO), Information Data Owner (IDO), Program SecurityOfficer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issuesEvaluate Authorization packages and make recommendation to the AO and/or DAO for authorizationEvaluate IS threats and vulnerabilities to determine whether additional safeguards are requiredAdvise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a systemEnsure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundaryInitiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAREvaluate security assessment documentation and provide written recommendations for security authorization to the GovernmentDiscuss recommendation for authorization and submit the security authorization package to the AO/DAOAssess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policyAssist the Government compliance inspectionsAssist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been takenEnsure organization are a

#hiring *Security Control Assessor (SCA) III*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/gA-WAZTH The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities.Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility.Performance shall include:Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructurePerform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)Advise the Information System Owner (ISO), Information Data Owner (IDO), Program SecurityOfficer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issuesEvaluate Authorization packages and make recommendation to the AO and/or DAO for authorizationEvaluate IS threats and vulnerabilities to determine whether additional safeguards are requiredAdvise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a systemEnsure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundaryInitiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAREvaluate security assessment documentation and provide written recommendations for security authorization to the GovernmentDiscuss recommendation for authorization and submit the security authorization package to the AO/DAOAssess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policyAssist the Government compliance inspectionsAssist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been takenEnsure organization are a

We are hiring #Cyber_Security_Information_Security Client in interesting candidates please send resumes to perimidi.p@kksoftwareassociates.com Visa status: : only USC /H1B/ GC Position: Cyber Security - Information Security Location: Atlanta, GA (From Day 1 Onsite,) Cyber Security - Information Security 1. Perform Threat Analysis & Create/Update the Threat Modelling? The Information Security Architect performs threat analyses for complex technical designs and reports the results using standard templates.? The Information Security Architect creates the initial Threat Modelling (with new applications/systems) or updates an existing Threat Modelling (with upgraded applications/systems).? The Information Security Architect tracks critical and high findings and updates the respective changes in the Threat Modelling.2. Derive Security Requirements? Given application or system descriptions, the Information Security Architect derives security requirements that will match the respective level of abstraction. 3. Review Design and Report Issues? The Information Security Architect reviews the design documents with respect to o Fulfillment of security requirements o (Common) design errorso Already known design shortcomings (are they fixed or not) ? The Information Security Architect submits a written report that lists all shortcomings and suggestions on how to fix them.4. Review Implementation and Report Issues? The Information Security Architect reviews the implementation with respect to? Fulfillment of security/design requirements? (Common) implementation errors,? Already known implementation shortcomings (e.g., from Code scan or Pen Testing, are they fixed or not?)? The Information Security Architect submits a written report that lists all shortcomings and suggestions on how to fix them.5. Review Project Security Planning and Report Issue? The Information Security Architect reviews various project management documents with respect to o plausibility of effort estimates for planned security tasks,o plausibility of cost estimates for planned security tasks,o overall plausibility of the timeline for security tasks,o the overall progress of security, o completeness of planned security tasks o security budget planning,o ordering status of mandatory security services,o mandatory security-related tasks? The Information Security Architect submits a written report that lists. o all shortcomings, together with suggestions on how to fix them,o all possible risks to achieving project goals that relate to information security.6. Cyber Security Incident Management? Responsible for end-to-end cyber security incident management process.7. Various Expert Consulting? The Information Security Architect will answer explicit questions on various security-related subjects, e.g. on o Information Classification, o Security aspects of project management, o Technical information security, etc.o Cryptography,o Cloud Security,o TPRM ? Third-Party Risk Managemento Vulnerability

#hiring *Principal Consultant, Incident Response (Unit 42) - Remote*, Miami, *United States*, fulltime #jobs #jobseekers #careers #Miamijobs #Floridajobs #ConsultingCorporateStrategy *Apply*: https://lnkd.in/g62MKKkr Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are. Our Approach to Work We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together! Your Career This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation. Your Impact Perform reactive incident response functions including but not limited to -host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs) Examine firewall, web, database, and other log sources to identify evidence of malicious activity Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine source of compromises and malicious activity that occurred in client environments Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations Ability to perform travel requirements as needed to meet business demands (on average 20%) Mentorship of team members in incident response and forensics best practices Your Experience 6+ years of incident res

#hiring *Principal Consultant, Incident Response (Unit 42) - Remote*, Atlanta, *United States*, fulltime #jobs #jobseekers #careers #Atlantajobs #Georgiajobs #ConsultingCorporateStrategy *Apply*: https://lnkd.in/grHGDsg6 Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are. Our Approach to Work We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together! Your Career This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation. Your Impact Perform reactive incident response functions including but not limited to -host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs) Examine firewall, web, database, and other log sources to identify evidence of malicious activity Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine source of compromises and malicious activity that occurred in client environments Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations Ability to perform travel requirements as needed to meet business demands (on average 20%) Mentorship of team members in incident response and forensics best practices Your Experience 6+ years of incide

#hiring *Principal Consultant, Incident Response (Unit 42) - Remote*, Miami, *United States*, fulltime #jobs #jobseekers #careers #Miamijobs #Floridajobs #ConsultingCorporateStrategy *Apply*: https://lnkd.in/gWfzY6Hf Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are. Our Approach to Work We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together! Your Career This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation. Your Impact Perform reactive incident response functions including but not limited to -host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs) Examine firewall, web, database, and other log sources to identify evidence of malicious activity Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine source of compromises and malicious activity that occurred in client environments Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations Ability to perform travel requirements as needed to meet business demands (on average 20%) Mentorship of team members in incident response and forensics best practices Your Experience 6+ years of incident res

#hiring *Principal Consultant, Incident Response(Unit 42) - Remote*, Atlanta, *United States*, fulltime #jobs #jobseekers #careers #Atlantajobs #Georgiajobs #ConsultingCorporateStrategy *Apply*: https://lnkd.in/g3AacDc5 Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are. Our Approach to Work We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together! Your Career This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation. Your Impact Perform reactive incident response functions including but not limited to -host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs) Examine firewall, web, database, and other log sources to identify evidence of malicious activity Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine source of compromises and malicious activity that occurred in client environments Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations Ability to perform travel requirements as needed to meet business demands (on average 20%) Mentorship of team members in incident response and forensics best practices Your Experience 6+ years of incident

#hiring *Principal Consultant, Incident Response(Unit 42) - Remote*, Atlanta, *United States*, fulltime #jobs #jobseekers #careers #Atlantajobs #Georgiajobs #ConsultingCorporateStrategy *Apply*: https://lnkd.in/gRP2Bf9t Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are. Our Approach to Work We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together! Your Career This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation. Your Impact Perform reactive incident response functions including but not limited to -host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs) Examine firewall, web, database, and other log sources to identify evidence of malicious activity Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Crypsis investigation tools to determine source of compromises and malicious activity that occurred in client environments Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations Ability to perform travel requirements as needed to meet business demands (on average 20%) Mentorship of team members in incident response and forensics best practices Your Experience 6+ years of incident

Looking for immediate joiner with Level 3 experience 4+ experience in DDos Aakamai Prolexic total experience 8+ years Scope: • DDoS Attack Mitigation: The primary responsibility is to detect, analyze, and mitigate Distributed Denial of Service (DDoS) attacks targeting Akamai customers. • Incident Response: Rapidly respond to DDoS incidents, assess their impact, and implement appropriate mitigation strategies. • Monitoring and Alerting: Continuously monitor network traffic, security logs, and alerts from Prolexic systems. • Tuning and Optimization: Fine-tune DDoS detection rules and thresholds to minimize false positives and enhance accuracy. • Collaboration: Work closely with other security teams, network engineers, and customer support to ensure effective DDoS protection. • Security Incident Handling: Investigate and respond to security incidents escalated from L2 analysts. • Threat Detection and Analysis: Monitor security alerts, analyze logs, and identify potential threats. • Forensics and Root Cause Analysis: Conduct in-depth investigations to understand attack vectors and root causes. • Security Tool Management: Manage and fine-tune security tools (SIEM, IDS/IPS, etc.). Deliverables: • Incident Reports: Detailed reports on detected DDoS attacks, including attack vectors, duration, and impact. • Mitigation Recommendations: Provide guidance on improving DDoS resilience based on observed attack patterns. • Documentation: Maintain accurate records of incidents, mitigation actions, and lessons learned. • Training: Train other team members and customers on DDoS best practices. • Continuous Improvement: Contribute to enhancing Prolexic's detection capabilities and response procedures. • Escalation Procedures: Document clear escalation paths for critical incidents. • Playbooks: Develop and maintain incident response playbooks for common scenarios. • Collaboration: Work closely with L1 and L2 analysts, as well as other Network & Security teams. • Metrics and KPIs: Track and report on SOC performance metrics (e.g., mean time to detect, mean time to respond). Email resumes to swati.shah@clearliteinc.com