Information Security Analyst

W2 Contract - GC/USC

St. Petersburg, FL

Remote

• (Primary Responsibility) Vulnerability Scanning: Perform passive external vulnerability scans, review results, and communicate recommendations to clients of varying technology complexity.
• Consultation and Advisory: Provide expert guidance to small business type clients on the implementation and management of comprehensive information security programs in line with firm requirements, specifically pertaining to vulnerability management requirements.
• Request Management: Effectively manage a large volume of requests, standardize approach, and perform analysis to surface key insights on both daily operations and scan results.
• Policy Understanding and Implementation: Ensure clients understand and effectively implement information security policies, aligning them with industry standards and regulatory requirements.
• Collaborate Effectively: Work closely with internal IT and Compliance teams to answer questions on security requirements and clarify or drive changes to policy if improvements are required.
• Communication: Deliver clear and concise communication, both written and verbal, to effectively convey complex security concepts to clients and stakeholders. Role will heavily involve facilitating discussions with independent branches to consult on security control implementation.
• Executive Presence: Demonstrate strong executive presence and professionalism in all client interactions, ensuring trust and confidence in advisory services.
• Issue Escalation: Diagnose and escalate security issues promptly through coordination with internal IT teams.

Skills:

• Experience with managed service providers or in implementing and configuring cybersecurity programs of all sizes.
• Strong communication skills, both written and verbal.
• Proven ability to work effectively with executive-level clients and stakeholders.
• Experience with network security technologies such as firewalls, VPNs, IDS/IPS and SIEM.
• Strong understanding of TCP/IP, DNS, DHCP and other networking concepts.
• Familiarity with penetration testing and vulnerability assessment tools.
• Qualys - familiarity is preferred.
• Focus is on network security, vulnerability management
• ServiceNow dashboards for results

• Bachelors degree or equivalent experience.
• CISSP, CompTIA Network+, CompTIA Security+, Certified Ethical Hacker (CEH), or other relevant certifications preferred.