Information Security Specialist

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out.

Position Title: Information Security Specialist

Work Location: Norwalk, CA, 90650 Hybrid

Duration: 12 months contract to start with the possibility of extension

Position Description:

• The Senior Information Security Specialist I is responsible for the planning, deployment, field, and operational support of the endpoint security platform(s) and related applications.
• This role will have responsibility for all aspects of the deployment from the initial customer engagement, planning, installation, optimization/utility and follow on customer support for the endpoint security platform(s) & applications.
• The Senior Information Security Specialist I will provide technical implementation, configuration, and troubleshooting assistance with the deployment of endpoint security platform(s) and associated applications.
• Troubleshoot customer deployment issues across small to large enterprises.
• Utilize and engineer native and third-party software deployment technologies.
• Install endpoint security software both remotely and physically.
• Develop scripts and processes around software deployment.
• Plan and report software deployment status.
• Work closely and collaborate with customer information technology teams.
• Leveraging security applications to provide support to customers in vulnerability and asset management, and assist customers with the integration of security solutions into existing tools.

Skills Required:

• The Senior Information Security Specialist I will possess knowledge and experience in common vulnerabilities and exposures (CVEs), their impacts, and remediation techniques.
• Deep understanding of software deployment technologies operating systems: Windows, Linux, and Mac.
• Familiarity with vulnerability management tools like OpenVAS, Nessus, Burp Suite
• Familiarity with vulnerability scanning tools such as Qualys, Tenable, Rapid 7 Nexpose/Insight VM
• Scripting: PowerShell, Python, Perl, Bash, Batch
• Software deployment using SCCM, Group Policy, McAfee EPO, IBM BigFix, Puppet, Chef, Citrix, PDQ, PsExec, Crowstrike
• Highly knowledgeable on Windows, Mac, and Linux platforms
• Working knowledge of Microsoft Office applications such as Word, Excel, Access, PowerPoint
• Extensive understanding of software deployment technologies
• Comprehensive skills in computer and network systems security
• Solid analytical/problem solving skills with the capability to identify solutions to unusual and complex problems and basic knowledge of IT infrastructure components including operating systems, applications, networks, and databases.

Experience Required:

• This classification must have a minimum of four (4) years of experience performing IT deployments or in an end user/customer environment.

Additional Experience Required:

• 2+ years of experience in the following: containerized environments.
• Red Hat OpenShift (on premises)
• Red Hat Enterprise Linux (RHEL)
• Security Enhanced Linux (SELinux)
• RedHat CoreOS (RHCOS)
• Federal Information Processing Standard (FIPS) 140-2 and 140-3
• National Institute of Standards and Technology (NIST) Special Publication 800-171 SIEM
• SYSLOG and log aggregation tools
• Linux file sharing: Network File System (NFS) and Common Internet File System (CIFS) and Endpoint Detection and Response Tools - like Carbon Black fapolicyd
• Checksum-based executable whitelisting
• Full Disk Encryption (FDE).

Education Required:

• This classification requires the possession of (a) a bachelor's degree in an IT-related or Engineering field
• One of the following certifications: Certified Information Systems Security Professional (CISSP) or equivalent, CompTIA Security+, or Certified Ethical Hacker (CEH).