ConvoCourses

Cyber Security Compliance and IT Jobs

it jobs in usa

False positive versus false negative

by Leave a Comment

False Positive – a test result that incorrectly indicates that a particular condition or attribute is present.
False Negative – a test result that incorrectly indicates that a particular condition or attribute is absent.

Sign up for free at http://convocourses.com for deeper dives.  

Many more videos on https://www.youtube.com/convocourses

short videos at https://www.tiktok.com/@convocourses?lang=en

and https://www.instagram.com/convocourses/

https://www.facebook.com/ConvoCourses-108091850619388

Podcast version of the content:

https://podcasts.apple.com/us/podcast/convocourses/id1500188278

http://www.nist80037rmf.com/google_podcast

cyber security engineer anaheim ca

by Leave a Comment

check out my courses at:
http://securitycompliance.thinkific.com

the job****************************************
Job Title: Cyber Security Engineer
Location: Anaheim ,CA
Duration: Long Term Contract

Relevant Experience: 8+ Years.

Essential Duties and Responsibilities
• Evaluates current systems environments, conducts research, recommends, and implements innovative systems technology that can enhance the reliability, security with emphasis on cyber security technology, productivity, and agility of the IT infrastructure
• Identifies assets and assesses risks, threats, and vulnerabilities of the IT assets in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, non-repudiation and contract compliance.
• Identifies and recommends cyber strategies for technology development based on stakeholder requirements
• Drives security reviews, identifies gaps in security architecture and designs and recommends necessary security controls to be integrated within the development lifecycle
• Owns and documents the implementation of the security controls and creates auditable evidence of security measures
• Develops and recommends security controls, identifies key security objectives to maximize software and system security while minimizing disruption to plans and schedules
• Leads translation of security controls into technical specifications and guidance to stakeholders to ensure common understanding across the stakeholders and enable adequate implementation
• Actively recommends engineering solutions in collaboration with application owners to remediate inherent cyber security risks
• Leads the collection and analysis of benchmarks and metrics for the department to drive continuous improvement
• Perform ongoing performance tuning, hardware upgrades, and resource optimization, configure CPU, memory, and disk partitions as required.
• Install new and rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.

Essential Education and Skills
Desired:
• Bachelor’s degree in Computer Science or related field, or equivalent work experience
• 6+ years of Information Technology experience, with at least 3 years of experience in information security working within security operations
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent
• Mastery of Cybersecurity best practices and standards (e.g. NIST, ISO, etc.)
• Mastery of computer networking concepts and protocols, and network security methodologies
• Mastery of cloud security concepts, including experience with public cloud (e.g. AWS, Microsoft Azure, etc.) and implementation experience

Knowledge, Skills, and Abilities:
• Significant experience performing analysis of log files from a variety of sources, to include individual host logs, network traffic logs, firewall logs, or intrusion prevention logs
• Experience monitoring threats via a SIEM console
• Deep knowledge of diverse operating systems, networking protocols, and systems administration
• Knowledge of Intrusion Detection/Prevention Systems
• Knowledge of Antivirus Systems
• Knowledge of commercial forensic tools
• Knowledge of common indicators of compromise and of methods for detecting these incidents
• Knowledge of TCP/IP Networking and knowledge of the OSI model
• Knowledge of OS management and Network Devices
• Solid working knowledge of SAN and NAS technology and VMWare
• Experience with Window systems administration – Domain Controllers, Active Directory, Sites and Services, File Server, GPO, DNS, SMTP, IIS etc.
• Experience with Power shell scripting
• Experience with SQL Server, Windows Virtualizations & Linux servers
• Excellent problem solving, critical thinking, and analytical skills – ability to de-construct problems

Thanks & Regards
Siva Kumar
Direct Line: 630-300-3850
Fax: 630-388-0066
Email: siva.kumar@olooptech.com
Oloop Technologies | Aurora, IL

Cyber Security Engineer
Confidential
Anaheim, CA

Security Specialist in Raleigh NC

by Leave a Comment

Short Description:
Contract resource with senior Information Security Analyst skillset, with focus on Identity and Access Management (I&AM), risk analysis, and information security policy, standards and procedure development.
Complete Description:
The Department of Transportation is seeking a short-term contractor to implement and maintain information security best practices within the NCDOT environment related to Identity and Access Management (I&AM) as well as other information security risk assessments, analysis and consultation for various IT systems.  Identity and Access Management (I&AM) is responsible for designing, developing and supporting a suite of agency wide shared services that primarily focus on identity, authentication, authorization, request management, provisioning, and certification.  The staff is part of the IT Information Security Office (ISO), with end-to-end responsibility for the agency-wide information security policy and standards.  The candidate should be an information security analyst with extensive information security operational experience, that also understands enterprise architecture, policy, standards and procedure and can consult with support, implementation and architecture teams.
Responsibilities will include:
  • Working with project & team managers and stakeholders to produce high quality and detailed identity and access management business requirements as they related to information security
  • Develop and enforce policies for identity and access management (I&AM) team for claims based authentication
  • Define the information security policy, standards and process/procedures as required for utilizing an identity management system including:  role mining, attestation, account provisioning, cloud/federated access provisioning, and others.
  • Develop  security policies and procedures for Roles Based Access Controls in claims based architecture
  • Develop security policies and procedures for claims based architecture for Active Directory and Sharepoint
  • Actively participate in assessment, planning, architecture, and design activities
  • Design, document, and implement security controls for Identity and Access Management
  • BizTalk, UDDI, web services, and claims based authentication experience
  • Design, document, and put security governance in place for external claims based authentication
The position will be responsible for documentation of security standards, security patterns, processes and procedures related to securing of web services and interoperability of all systems for the 3C and Data Services project.  The individual will educate application development teams on those standards and processes from an information security perspective.

NCDOT – Info Security Specialist- 3C North Carolina

by Leave a Comment

22ndstaffing.com

Work Location:                                                                   4101 Capital Blvd, Raleigh NC 27604
Interview Type:                                                                  Either Phone or In Person
Short Description:
Contract resource with senior Information Security Analyst skillset, with focus on Identity and Access Management (I&AM), risk analysis, and information security policy, standards and procedure development.
Complete Description:
The Department of Transportation is seeking a short-term contractor to implement and maintain information security best practices within the NCDOT environment related to Identity and Access Management (I&AM) as well as other information security risk assessments, analysis and consultation for various IT systems.  Identity and Access Management (I&AM) is responsible for designing, developing and supporting a suite of agency wide shared services that primarily focus on identity, authentication, authorization, request management, provisioning, and certification.  The staff is part of the IT Information Security Office (ISO), with end-to-end responsibility for the agency-wide information security policy and standards.  The candidate should be an information security analyst with extensive information security operational experience, that also understands enterprise architecture, policy, standards and procedure and can consult with support, implementation and architecture teams.
Responsibilities will include:
  • Working with project & team managers and stakeholders to produce high quality and detailed identity and access management business requirements as they related to information security
  • Develop and enforce policies for identity and access management (I&AM) team for claims based authentication
  • Define the information security policy, standards and process/procedures as required for utilizing an identity management system including:  role mining, attestation, account provisioning, cloud/federated access provisioning, and others.
  • Develop  security policies and procedures for Roles Based Access Controls in claims based architecture
  • Develop security policies and procedures for claims based architecture for Active Directory and Sharepoint
  • Actively participate in assessment, planning, architecture, and design activities
  • Design, document, and implement security controls for Identity and Access Management
  • BizTalk, UDDI, web services, and claims based authentication experience
  • Design, document, and put security governance in place for external claims based authentication
The position will be responsible for documentation of security standards, security patterns, processes and procedures related to securing of web services and interoperability of all systems for the 3C and Data Services project.  The individual will educate application development teams on those standards and processes from an information security perspective.
Questions:
Questions
Questions
Answers
Question 1
Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement?
Question 2
All work must be completed on site. Do you accept this requirement?
Question 3
Please list candidate’s email address HERE that will be used when submitting E-RTR.
Question 4
Please indicate how soon this candidate is available to start work. Vendors are encouraged to submit candidates that are available for the duration of the assignment.
Question 5
Vendor must disclose to the agency if the candidate will be subcontracted at the time of submission. Do you accept this requirement?
Question 6
Vendor must notify the agency if any portion of the requirements listed in this task order are to be outsourced to other countries. Do you accept this requirement?
Question 7
This role is not new to the Department. There has been someone working in the role in the past. However, this is a new requirement for those services and it is open for competition.

IT jobs in usa

by Leave a Comment

Information Technology (IT) jobs in the USA are very hot!  As more and more business’ in developed countries go online, more and more jobs for IT become available.  According to Wanted Analytics, China currently has the greatest demand for software engineers with the USA in second.  The key to getting an IT job in America is specialization.  Companies are looking for a specific skillset.  According to an article on Fortune magazine, 3 of the top 10 career fields with the most job openings of 2014 were specialized IT jobs.

IT Jobs in America
3 of the top ten jobs in are IT jobs usa

IT is very competitive but once you specialize in a certain aspect of IT (i.e. IT security engineer, IT network engineer, software engineer) your competition gets smaller.  Remaining competitive means gaining experience, IT certifications and degrees.   As the market for IT people has gotten more complex it has also become important to be diversified in your skills.  If you are a software engineer it really helps to know other things like networking, security and maybe even program management.

Probably the most important thing to do if you are going for a job in Information Technology is to study the company or organization that you are going after.   Often times employers are looking for something every specific.  You may have the experience they are looking for so you should put that on your resume and make sure it is mentioned during the interview.  You find that you are just shy of what they are looking for then you should learn what you can before you  approaching them.

In the DoD, every IT professional is expected to have solid security experience or security certification even if they are not an expert in it.

IT is a huge growing market.