Keith Cassant, MAOL, SPHR, CEH’s Post

#hiring *Security Control Assessor (SCA) III*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/gA-WAZTH The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities.Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility.Performance shall include:Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructurePerform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)Advise the Information System Owner (ISO), Information Data Owner (IDO), Program SecurityOfficer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issuesEvaluate Authorization packages and make recommendation to the AO and/or DAO for authorizationEvaluate IS threats and vulnerabilities to determine whether additional safeguards are requiredAdvise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a systemEnsure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundaryInitiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAREvaluate security assessment documentation and provide written recommendations for security authorization to the GovernmentDiscuss recommendation for authorization and submit the security authorization package to the AO/DAOAssess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policyAssist the Government compliance inspectionsAssist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been takenEnsure organization are a

#hiring *Security Control Assessor (SCA) III*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/gA-WAZTH The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities.Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility.Performance shall include:Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructurePerform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)Advise the Information System Owner (ISO), Information Data Owner (IDO), Program SecurityOfficer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issuesEvaluate Authorization packages and make recommendation to the AO and/or DAO for authorizationEvaluate IS threats and vulnerabilities to determine whether additional safeguards are requiredAdvise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a systemEnsure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundaryInitiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAREvaluate security assessment documentation and provide written recommendations for security authorization to the GovernmentDiscuss recommendation for authorization and submit the security authorization package to the AO/DAOAssess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policyAssist the Government compliance inspectionsAssist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been takenEnsure organization are a

#hiring *Security Control Assessor (SCA) III*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/gA-WAZTH The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). SCAs also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and its environment of operation and recommend corrective actions to address identified vulnerabilities.Responsibilities will cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer's area of responsibility.Performance shall include:Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructurePerform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)Advise the Information System Owner (ISO), Information Data Owner (IDO), Program SecurityOfficer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issuesEvaluate Authorization packages and make recommendation to the AO and/or DAO for authorizationEvaluate IS threats and vulnerabilities to determine whether additional safeguards are requiredAdvise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a systemEnsure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundaryInitiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAREvaluate security assessment documentation and provide written recommendations for security authorization to the GovernmentDiscuss recommendation for authorization and submit the security authorization package to the AO/DAOAssess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policyAssist the Government compliance inspectionsAssist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been takenEnsure organization are a

𝐉𝐨𝐛 𝐓𝐢𝐭𝐥𝐞- ArcSight Consultant 📢 𝐀𝐩𝐩𝐥𝐲 𝐍𝐨𝐰: https://bit.ly/47zSoeD 👈 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞: 11-14 Years 𝐋𝐨𝐜𝐚𝐭𝐢𝐨𝐧: Abu Dhabi, United Arab Emirates ☑ 𝐑𝐎𝐋𝐄 𝐏𝐔𝐑𝐏𝐎𝐒𝐄: ● The ideal candidate will possess a strong ArcSight SIEM Tool (SIEM Tool) knowledge.  ● To monitor and provide analysis of the growing threat and to get involved in investigations and track Compliance and follow-up. ✅ 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 & 𝐀𝐜𝐜𝐨𝐮𝐧𝐭𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬: ➥ Integration of new devices with ArcSight ESM for log collection and reporting. ➥ Maintenance of ArcSight components – ArcSight Logger, ArcSight connector servers, ESM. ➥ Fine tune existing use case configured in SIEM environment. ➥ Creation of ADHOC reports/rules and dashboard in Logger and ESM. ➥ Sizing the SIEM in terms of hardware, storage, and software license requirements. ➥ Upgradation of ArcSight SIEM environment to the latest version. ➥ Periodic assessment on SIEM and report necessary changes and enhancement to management. ➥ Troubleshooting issues in existing ArcSight components. Resolution of issues will not be time bounded because most of the issues depend on ArcSight support and product capability to support those features. ➥ Periodic Content and context update for SIEM. ➥ Generate periodic reports from ArcSight ESM and distribute to security team. ➥ Managing configuration in ESM and Logger ➥ Managing backups restore related to SIEM environment. ➥ Conduct periodic maintenance activities like health checkup in ESM and Logger. ➥ Coordinate with SIEM engineering team for trouble shooting of faults & problem resolution ➥ Open a case and coordinate with OEM to resolve bug fixes & patches ➥ Develop log baseline document to share with asset owner for enabling logs. ➥ Capacity planning for ArcSight agent server. ➥ Optimize existing SIEM hardware resources for better utilization. ➥ Capacity planning for SIEM Manager and Database. ➥ Develop and maintain SIEM device management process. ➥ Create use cases based on Ad-hoc requests. ➥ Knowledge transfer to SOC on recent updates on SEIM and enhancements. ➥ Configure regular updates of threat intelligence information in SIEM for real time monitoring. ✒ 𝐄𝐝𝐮𝐜𝐚𝐭𝐢𝐨𝐧 & 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞: ➤ Total years of experience are 11+. ➤ Great knowledge of ArcSight SIEM Administration and its architecture designing. ➤ Good knowledge of IT system configuration and log analysis ➤ Knowledge of Information Security systems, methodologies, and best practices. ➤ Team handling, positive attitude, and good learning skills. #jobs #hiringjobs #jobopening #jobopportunity #jobsearch #career #careergrowth #abudhabi #abudhabijobs #abudhabijobsearch #abudhabihiring #abudhabijobshiring #uae #uaejobsearch #uaehiring #uaejobs #uaecareers

Hi Professionals, I hope you are doing well. Please find the JD for the below position. Role Name : Security Architect Client & End Client : Will let you know Location : Atlanta, GA Job Description Perform Threat Analysis & Create/Update the Threat Modelling? The Information Security Architect performs threat analyses for complex technical designs and reports the results using standard templates.? The Information Security Architect creates the initial Threat Modelling (with new applications/systems) or updates an existing Threat Modelling (with upgraded applications/systems).? .2. Derive Security Requirements? Given application or system descriptions, the Information Security Architect derives security requirements respective level of abstraction. 3.The Information Security Architect reviews the design documents with respect to o Fulfillment of security requirements o (Common) design Already known design shortcomings (are they fixed or not) ? The Information Security Architect submits a written report that lists all shortcomings and suggestions on how to fix them.4. Review Implementation and Report Issues? The Information Security Architect reviews the implementation with respect to? Fulfillment of security/design requirements? (Common) implementation errors? Already known implementation shortcomings (e.g., from Code scan or Pen Testing, are they fixed or not?)? The Information Security Architect submits a written report that lists all shortcomings and suggestions on how to fix them.5. Review Project Security Planning and Report Issue? The Information Security Architect reviews various project management documents with respect to o plausibility of effort estimates for planned security tasks,o plausibility of cost estimates for planned security tasks,o overall plausibility of the timeline for security tasks,o the overall progress of security, o completeness of planned security tasks of security budget planning,on ordering status of mandatory security services,o mandatory security-related tasks? The Information Security Architect submits a written report that lists. o all shortcomings, together with suggestions on how to fix them,o all possible risks to achieving project goals that relate to information security.6. Cyber Security Incident Management? Responsible for end-to-end cyber security incident management process.7. Various Expert Consulting? The Information Security Architect will answer explicit questions on various security-related subjects, e.g. on o Information Classification, o Security aspects of project management, o Technical information security, etc.o Cryptography,o Cloud Security,o TPRM ? Third-Party Risk Management Vulnerability Review and Assessment,o Dev Sec-opso Security Toolso Audit Support (External and Internal)8. Technical Security Tasks? Given the necessary input, the Information Security Architect will perform complex tasks with a specific, well-described result. Thanks & Regards  prashant.kumar@synkriom.com 

Understanding the Key Differences: IT Security Officer vs. IT Security Technical Engineer The IT Security Officer & IT Security Technical Engineer have distinct responsibilities, focus areas, & required skills, despite both being crucial for safeguarding an organization's information systems: IT Security Officer Primary Responsibilities: - Policy & Strategy Development: Craft & implement robust IT security policies, standards, & procedures. - Compliance and Governance: Ensure adherence to regulations & industry standards, such as GDPR & ISO 27001. - Risk Management: Identify, assess, & mitigate security risks through comprehensive risk management strategies. - Incident Response Coordination: Lead the incident response process, ensuring preparedness & effective resolution of security incidents. - Awareness and Training: Promote a security-conscious culture through regular training & awareness programs. - Management & Leadership: Oversee the IT security team, manage budgets, & report on security initiatives to senior management. Skills Required: - Strong understanding of regulatory & compliance requirements. - Excellent leadership & communication skills. - Experience in policy development & implementation. - Knowledge of risk management & incident response. - Ability to conduct effective security training. IT Security Technical Engineer Primary Responsibilities: - Technical Implementation: Deploy & manage security technologies such as firewalls, IDS/IPS, & encryption tools. - Monitoring & Analysis: Continuously monitor network traffic & system logs to detect & respond to security threats. - Vulnerability Management: Perform vulnerability assessments & penetration tests, applying patches to mitigate risks. - Incident Response: Handle the technical aspects of incident response, including investigation & recovery. - System Hardening: Implement measures to strengthen system & network security. - Technical Support: Provide expert guidance to IT staff on security-related issues and best practices. Skills Required: - Proficiency with security technologies & tools. - Strong technical skills in networking, operating systems, & application security. - Experience with vulnerability assessment & penetration testing. - Knowledge of incident response & forensic analysis. - Ability to analyze security data & logs. Key Differences - Focus: The IT Security Officer handles security strategy & governance, while the IT Security Technical Engineer focuses on technical implementation. - Responsibilities: The IT Security Officer manages security strategy & compliance, while the IT Security Technical Engineer handles technical implementation & incident response. - Skills: The IT Security Officer requires leadership and strategic skills, while the IT Security Technical Engineer needs technical expertise. - Scope: The IT Security Officer oversees the organization's overall security, while the IT Security Technical Engineer focuses on specific technical solutions..

Security domains cybersecurity analysts In this reading you will learn more about CISSP’s eight security domains and how they relate to the work you’ll do as a security analyst. Domain one: Security and risk management Elements of the security and risk management domain that impact an organization's security posture include: • Security goals and objectives • Risk mitigation processes • Compliance • Business continuity plans • Legal regulations • Professional and organizational ethics Information security, or InfoSec, is also related to this domain and refers to a set of processes established to secure information. There are many InfoSec design processes, such as: • Incident response • Vulnerability management • Application security • Cloud security • Infrastructure security Domain two: Asset security Asset security involves managing the cybersecurity processes of organizational assets, including the storage, maintenance, retention, and destruction of physical and virtual data. Domain three: Security architecture and engineering This domain focuses on managing data security. Ensuring effective tools, systems, and processes are in place helps protect an organization’s assets Additional design principles related to this domain, which are discussed later in the program, include: • Threat modeling • Least privilege • Defense in depth • Fail securely • Separation of duties • Keep it simple • Zero trust • Trust but verify Domain four: Communication and network security This domain focuses on managing and securing physical networks and wireless communications. Domain five: Identity and access management The identity and access management (IAM) domain focuses on keeping data secure. It does this by ensuring user identities are trusted and authenticated and that access to physical and logical assets is authorized. Domain six: Security assessment and testing The security assessment and testing domain focuses on identifying and mitigating risks, threats, and vulnerabilities. Security assessments help organizations determine whether their internal systems are secure or at risk. Domain seven: Security operations The security operations domain focuses on the investigation of a potential data breach and the implementation of preventative measures after a security incident has occurred. This includes using strategies, processes, and tools such as: • Training and awareness • Reporting and documentation • Intrusion detection and prevention • SIEM tools • Log management • Incident management • Playbooks • Post-breach forensics • Reflecting on lessons Domain eight: Software development security The software development security domain is focused on using secure programming practices and guidelines to create secure applications. Having secure applications helps deliver secure and reliable services, which helps protect organizations and their users.

The CISSP (Certified Information Systems Security Professional) certification is a globally recognized certification for information security professionals. It covers a wide range of topics and domains related to information security. As of my knowledge up until 2024, the CISSP certification consists of eight domains: 1. Security and Risk Management: This domain covers topics such as security governance, risk management, security policies, procedures, and legal and regulatory compliance. 2. Asset Security: This domain focuses on the protection of information assets, including physical and logical assets, data classification, asset management, and privacy protection. 3. Security Architecture and Engineering: This domain deals with the design, architecture, and implementation of security controls and mechanisms. Topics include security models, secure design principles, security capabilities of information systems, and assurance levels. 4. Communication and Network Security: This domain covers the management, design, and protection of network infrastructure, including topics such as network protocols, secure network components, secure communication channels, and network intrusion detection and prevention systems. 5. Identity and Access Management (IAM): This domain focuses on the management and control of user access to information systems. Topics covered include user provisioning, access control models, authentication methods, and identity management systems. 6. Security Assessment and Testing: This domain covers the techniques, tools, and methodologies used to assess and test the security of information systems. Topics include vulnerability assessments, penetration testing, system and network auditing, and security control testing. 7. Security Operations: This domain deals with the day-to-day operations of information security programs, including topics such as incident response, disaster recovery, business continuity planning, security monitoring, and resource protection. 8. Software Development Security: This domain focuses on the security aspects of software development life cycles, including topics such as secure coding practices, software vulnerabilities, and software security controls. Please note that the CISSP domains may be subject to updates or changes over time as the field of information security evolves.

SAGESSE TECH 👩🎓 How can you be NIS2 Compliant for SAP Systems using SAGESSE TECH SAP Security Solutions ( Most Budget Friendly and State-Of-The- Art Tech Solutions in Market ) NIS2 heightens the requirements for companies. There are four main areas to comply and to ensure security on an organizational level: 1. Risk Management: Organizations need to take measures to minimize cyber risks. It includes enhanced network security, incident management, strong access control, and encryption. 🏋♂️ SAP PenTest Service by SAGESSE TECH, Continous SAP Threat Detection Tool 2. Corporate Accountability: Management must oversee, approve, and be prepared to address cyber risks when needed. Breaches might result in different penalties for management, which can potentially become a temporary ban from management roles. 🏋♀️ SAP AuditX by SAGESSE TECH, SAP Threat Detection and Monitoring integrated with SPLUNK and IBM QRadar Reporting Obligations: Essential and important entities must have processes to report security incidents with a significant impact on their services. NIS2 can set notification deadlines: For instance, initial threat notifications must be made within 24 hours of identifying an incident, with further updates required within 72 hours. 🏋♂️ SAP AuditX by SAGESSE TECH, SAP Threat Detection and Monitoring integrated with SPLUNK and IBM QRadar 4. Business Continuity: Organizations must have a plan to show how they ensure business continuity in case of major cyber incidents. It is important to include considerations about system recovery, emergency procedures, and having a crisis response team. 🏋♀️ SAP AuditX by SAGESSE TECH, SAP Threat Detection and Monitoring integrated with SPLUNK and IBM QRadar, SAP PenTest Service by SAGESSE TECH Info : sales@sagesseconsultancy.com, kaankars@sagesseconsultancy.com

Hi all, Urgent Requirement!! If interested, please share updated resume at arpita@prospectlys.com. Below is the job description: Job title: -Cybersecurity Architect Location: - Frisco, TX or Seattle, WA (Day 1 onsite with no flexibility) NOTE:- Make sure that the candidate should have mandate skills set. Designing & implementing preventive security, Defender policies Implementing threat-hunting & threat-management using Sentinel, ADX, LogAnalytics Enable Threat Problem Management Looking for someone who can help develop our threat detection and threat management capabilities for our cloud landscape (Azure, AWS, GCP). This person should be able to lead design and development of threat detection/hunting solutions, threat management solutions and cloud-provider-native features/products. This person should be able to guide and enable team to deliver on preventative security and pre-emptive mitigations. This person will need to be hands-on with actual experience building and operating threat-detection & threat-management practice in a production environment. Designing & implementing preventive security, Defender policies Implementing threat-hunting & threat-management using Sentinel, ADX, LogAnalytics Designing & implementing and operating security incident management process & platform as part of threat management Designing & implementing preventative policies, runbooks/SOPs for resolution, automated resolution framework, and enforcement solutions Enable Threat Problem Management: Aligning other parts of security domain (IDM, IAM, Data security, etc.) with detected/discovered threats or security incidents to ensure shift-left in threat management. Designing & implementing infra-authentication & authorization, infrastructure automation (infra-as-code, gitops), config management Designing & implementing policies for data encryption, data access, DB logging, data retention Designing & implementing for secrets & key management, auto log enablement, log aggregation for DLP/SIEM Our platform of choice for most of SIEM/SOAR capability development is Azure; hence that is the area of expertise we will be interested in.