300 Information Security jobs in Quincy

Type of Requisition:

Clearance Level Must Currently Possess:

Clearance Level Must Be Able to Obtain:

Public Trust/Other Required:

Job Family:

Job Qualifications:

Skills:

Certifications:

Experience:

US Citizenship Required:

Job Description:

The Information Systems Security Officer (ISSO) III is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system.

This will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries.

This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

Performance shall include:

• Assist the ISSM in meeting their duties and responsibilities.

• Prepare, review, and update authorization packages.

• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.

• Notify ISSM when changes occur that might affect the authorization determination of the information system(s).

• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.

• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.

• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.

• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.

• Ensure audit records are collected, reviewed, and documented (to include any anomalies)

• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.

• Execute the cyber security portion of the self-inspection, to include security coordination and review of all system assessment plans.

• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.

• Prepare reports on the status of security safeguards applied to computer systems.

• Perform ISSO duties in support of in-house and external customers.

• Conduct continuous monitoring activities for authorization boundaries under your preview.

• Assist Department of Defense, National Agency and Contractor organizations with the development of assessment and authorization (A&A) efforts.

Experience:

• 5+ years related experience, especially in developing RMF packages or bodies of evidence.

• 2+ years SAP experience required.

• Prior performance in roles such as System, Network Administrator or ISSO.

Education:

• Bachelor’s degree in a related area or equivalent experience (4 years)

Certifications:

• IAT Level II ( Security+ CE, CCNA Security, etc) or IAM Level II (in lieu of IAT Level II)

Clearance Required to Start:

• TS/SCI required.

• Must be able to Attain – TS/SCI with CI Polygraph

#AirforceSAPOpportunities #ISSO #TS/SCI

Scheduled Weekly Hours:

Travel Required:

T elecommuting Options:

Work Location:

Additional Work Locations:

Total Rewards at GDIT:

gdit.com/tc .

Type of Requisition:

Clearance Level Must Currently Possess:

Clearance Level Must Be Able to Obtain:

Public Trust/Other Required:

Job Family:

Job Qualifications:

Skills:

Certifications:

Experience:

US Citizenship Required:

Job Description:

The Information Systems Security Officer (ISSO) III is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system.

This will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries.

This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

Performance shall include:

• Assist the ISSM in meeting their duties and responsibilities.

• Prepare, review, and update authorization packages.

• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.

• Notify ISSM when changes occur that might affect the authorization determination of the information system(s).

• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.

• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.

• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.

• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.

• Ensure audit records are collected, reviewed, and documented (to include any anomalies)

• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.

• Execute the cyber security portion of the self-inspection, to include security coordination and review of all system assessment plans.

• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.

• Prepare reports on the status of security safeguards applied to computer systems.

• Perform ISSO duties in support of in-house and external customers.

• Conduct continuous monitoring activities for authorization boundaries under your preview.

• Assist Department of Defense, National Agency and Contractor organizations with the development of assessment and authorization (A&A) efforts.

Experience:

• 5+ years related experience, especially in developing RMF packages or bodies of evidence.

• 2+ years SAP experience required.

• Prior performance in roles such as System, Network Administrator or ISSO.

Education:

• Bachelor’s degree in a related area or equivalent experience (4 years)

Certifications:

• IAT Level II ( Security+ CE, CCNA Security, etc) or IAM Level II (in lieu of IAT Level II)

Clearance Required to Start:

• TS/SCI required.

• Must be able to Attain – TS/SCI with CI Polygraph

#AirforceSAPOpportunities #ISSO #TS/SCI

Scheduled Weekly Hours:

Travel Required:

T elecommuting Options:

Work Location:

Additional Work Locations:

Total Rewards at GDIT:

gdit.com/tc .

- Understanding with Cloud Security Concepts (SaaS, PaaS, IaaS), Mobile Architecture, Network and Application Security and /or Data protection.
- Maintain and analyze security controls in network and host-based security platforms:
- Good understanding of system and web application vulnerability scanning tools
- Automated security patching systems
- Network and host-based Intrusion Detection/Prevention Systems
- Good understanding of Security Information & Event Management (SIEM) platforms
- Firewall and network access controls lists
- Web and E-mail proxy and filtering systems - Test security tool requirements, controls, trials, and evaluations, as well as security operations procedures and processes
- Proficient knowledge and experience with the following: vulnerability scanning, firewalls, antivirus & malware analysis, proxy, IDS/IPS, and log correlation tools.
- Support security infrastructure that detects and responds to: threats, including IPS, WAF, SIEM and NAC systems
- Focusing on the creation of threat detection logic, dynamic operational dashboards, and data source onboarding for Splunk Enterprise tool
- Manage and develop dashboard reports to meet the requirements of key stakeholders, and processes for Splunk Enterprise
- Assisting incident response and analyzing the reports to respond to a security incident.
- Ethical Hacking or Security Analyst experience helpful
- SOC tools and Cloud experience preferred.
- Strong understanding of enterprise, network, system and application level security issues.

#LI-MG1

• Collaborates with other functions to actively facilitate the interaction of cross-functional stakeholders to ensure that products are winning in the market
• Ensure the success of weekly cross-functional meetings designed to quickly identify risks to performance, driving team accountability to actions & tactics required to course correct
• Identify weekly and monthly deliverables to the SS&A teams
• Identify areas for improvement and leverage insights from other regions to drive optimizations to the Monthly operating model.
• Tracks SS&A strategy readiness for new product launches and drives closure to the forecast beacons.
• Act as the "Process Center of Excellence" for the Strategic Sales and Analytics organization
• Establish global best practices and document in playbooks

• Obsessed with Winning Mindset
• Bachelor's Degree or equivalent experience
• 1+ years Program management or Category/Sales analysis experience
• Experience desired in some combination of commercialization, sales analytics, new product launches or program management
• Advanced Microsoft Excel / Office skills
• Excellent written, verbal and communication skills
• Cross-functional leadership skills and ability to influence cross-functional partners
• Possess a strong bias to action and accountability
• High energy, with a positive attitude
• Detail oriented with strong organizational and time management skills, able to manage multiple priorities and meet tight deadlines

Location: Anywhere in Country

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

We are looking for a dedicated and skilled Endpoint Security Operations Engineer to join our cybersecurity team. The ideal candidate will be responsible for the management, monitoring, and optimization of endpoint security solutions, including CrowdStrike, Microsoft Defender for Endpoint, Microsoft Defender for Mobile, and CyberArk Endpoint Privilege Manager (EPM). This role requires a strong understanding of endpoint security principles, threat detection, and incident response, as well as the ability to work collaboratively with cross-functional teams to enhance our security posture.

Key Responsibilities:

1. Endpoint Security Management:

2. Administer and support endpoint security solutions, including CrowdStrike, Microsoft Defender for Endpoint, Microsoft Defender for Mobile, and CyberArk EPM.

3. Monitor endpoint security alerts and incidents, responding promptly to potential threats and vulnerabilities.

4. Threat Detection and Response:

5. Analyze security events and alerts to identify potential threats and respond to incidents in a timely manner.

6. Conduct forensic investigations on security incidents to determine the root cause and implement corrective actions.

7. Policy Configuration and Enforcement:

8. Develop, implement, and enforce endpoint security policies and procedures to protect organizational assets.

9. Configure and optimize security settings within endpoint security tools to enhance protection against threats.

10. User Support:

11. Provide technical support to end-users regarding endpoint security tools and best practices.

12. Collaboration and Communication:

13. Work closely with IT and security teams to integrate endpoint security solutions with existing security frameworks and incident response processes.

14. Communicate effectively with stakeholders to report on security incidents, trends, and recommendations for improvement.

15. Documentation and Reporting:

16. Maintain accurate documentation of endpoint security configurations, processes, and incident response actions.

17. Generate reports on endpoint security metrics, incidents, and compliance for management review.

18. Continuous Improvement:

19. Stay updated on the latest trends, threats, and technologies in endpoint security.

20. Identify opportunities for process improvements and automation within endpoint security operations.

21. Automate activities through scripting (PowerShell, Python) and automation (Tines, PowerAutomate, etc.)

Qualifications:

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.

• Proven experience in managing and supporting endpoint security solutions, including CrowdStrike, Microsoft Defender for Endpoint, Microsoft Defender for Mobile, and CyberArk EPM.

• Strong understanding of endpoint security principles, threat detection, and incident response methodologies.

• Proficiency in security monitoring tools and SIEM solutions.

• Excellent problem-solving skills and attention to detail.

• Strong communication and interpersonal skills.

• Scripting experience, including PowerShell, Python, etc.

• Ticket and change management experience in ServiceNow

• Relevant cybersecurity certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH)) are a plus.

Preferred Skills:

• Experience with scripting languages (e.g., PowerShell, Python) for automation and reporting.

• Familiarity with compliance frameworks (e.g., NIST, ISO 27001) and risk management practices.

• Knowledge of network security concepts and technologies.

What we offer you

At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .

• We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $77,500 to $40,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is 92,900 to 160,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

• Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.

• Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Are you ready to shape your future with confidence? Apply today.

EY accepts applications for this position on an on-going basis.

For those living in California, please click here for additional information.

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law?

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at .

Summary:

Meta Security is looking for an Incident Response Engineer with experience coordinating, investigating and responding to internal and external threats. You will help the team establish, lead and execute multi-year roadmaps to mature investigative and response services, drawing upon automation and cross functional partnerships to create scalable and maintain high standards of operational competence.

Required Skills:

Security Engineer, Incident Response Responsibilities:

1. Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution

2. Develop Incident Response initiatives that improve our functionalities to effectively respond and remediate security incidents

3. Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services

4. Influence and align the team's mission and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects

5. Build, cultivate, and maintain successful relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work

6. Partner with cross-functional teams to solve challenges related to a broad spectrum of detection and response initiatives

7. Collaborate with software and production engineering teams to develop scalable and adaptable Incident Response and Investigative solutions

8. Focus on identifying areas of greatest impact for prioritizing, automating and scaling every aspect of our detection and response functionalities

9. Coach, mentor, support and care for the team in a way that enables long-term career development, happiness and success at scale

Minimum Qualifications:

Minimum Qualifications:

1. Bachelor of Science or Master of Science in Computer Science or related field, or equivalent experience

2. 8+ years of work experience in Security Incident Response and Detection and Response Engineering in a large, regulated organization

3. In-depth subject-matter knowledge in technical and process regarding Security Operations and Incident Response services

4. Experience developing and delivering information on incident and program status for leadership

5. Experience leading and managing complex cross-functional programs

6. Experience responding to both external and insider threats

7. Experience analyzing network and host-based security events

8. Knowledge of networking technologies, specifically Transmission Control Protocol (TCP)/Internet Protocol (IP) and the related protocols

9. Knowledge of operating systems, file systems, and memory structures on Windows, macOS and Linux

10. Coding/scripting experience in one or more general purpose languages

11. Experience with attacker tactics, techniques, and procedures

Preferred Qualifications:

Preferred Qualifications:

1. Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigate suspicious behavior across networks and systems

2. Experience recruiting, building, and leading technical teams, including performance management

3. Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence

4. Broad knowledge across the Security domain, as well as demonstrated experience in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development

Public Compensation:

$177,000/year to $251,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at

• Boston, MA
• Onsite
• Must have extensive experience with Cisco & Aruba

About the Organization: The Commonwealth of Massachusetts Executive Office of Economic Development (EOED) is committed to driving economic growth by fostering business development, infrastructure investment, industry advancement, and consumer confide Chief Information Officer, Officer, Technology, Leadership, User Experience, Cybersecurity