CareRev

CareRev is bringing the future of work to Healthcare! CareRev's mission is to build a sustainable future for healthcare professionals. CareRev is a modern marketplace platform offering professionals the freedom to choose how and when they work, tools and training to develop their careers, and personalized growth opportunities.We are growing our security team at CareRev! As a key member of the security team, you'll collaborate across the organization streamlining procurement and vendor risk management to build awareness, understanding, and mitigation of risk while building trust with cross-divisional stakeholders. You will work within the security team and facilitate discussions with third party vendors, enhance processes and controls for new vendor procurement, and draft materials for reporting to leadership and management committees.
You will also work with the security and broader engineering team to lead, create, and document scalable processes for risk assessment and decision making, additionally supporting CareRev’s own internal and external security documentation. You will be an instrumental contributor and leader in building a scalable security program for our growing organization. Depending on the skills and interest of the successful candidate, this role has the opportunity to grow additional cybersecurity skills sets as we continue developing our security team.
What We're Looking for
While you should have many of these skills, not all are required.
<ul>
<li>Able to communicate relevant information clearly and concisely, both verbally and in writing</li>
<li>Experience in 3rd party management, audit, oversight, internal controls, operational risk management and mitigation</li>
<li>Independent judgment with strong analytical and risk assessment skills</li>
<li>Proven track record of building effective working relationships with internal and external business partners and senior leaders</li>
<li>Project management skills with ability to work independently and with a team, prioritize and manage multiple projects and succeed in a fast-paced, heavy workload environment</li>
<li>Demonstrated success in introducing process improvements and automation for security / operational risk management teams</li>
<li>Knowledge of relevant information security control frameworks, such as ISO 27002, SOC 2 Trust Services Criteria, PCI DSS, NIST Cyber Security Framework (CSF) / 800-53, CIS Critical Security Controls</li>
<li>A critical problem solver, detailed oriented, and highly motivated self-starter with a passion for constant learning &amp; improvement</li>
<li>A bias for action and ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Experience and interest in other aspects/bodies of cybersecurity work (e.g. vulnerability management, cloud security) a plus</li>
<li>Knowledge of/familiarity with AWS, Heroku, and kubernetes are all a plus</li>
<li>Certifications are not required, but CompTIA Security+, CASP+, CISM, or PMP could be helpful</li>
<li>Programming background is plus</li>
</ul>
What you’ll do:
<ul>
<li>Assess the security posture of 3rd parties as a part of the onboarding process for new tools and services (organization-wide) with a view on technology and security risk</li>
<li>Oversee, monitor, assess, and report on third-party risk</li>
<li>Lead/create and maintain security process documentation (e.g. documenting organizational standards for risk decision making)</li>
<li>Review and maintain security policy documents in preparation for annual audits</li>
<li>Provide consultative support and collaborate with business partners and external stakeholders to identify enhancement opportunities to strengthen third party management processes and controls</li>
<li>Communicate efficiently about risk review results to concerning businesses and key partners as per plan</li>
<li>Continuously iterate on improvement opportunities to optimize GRC processes across the organization and relevant stakeholders to maximize efficiency and scalability</li>
<li>Execute ad-hoc projects as needed (we’re working as a team for each one of us to grow and develop our skills in areas of interest and company need)</li>
</ul>Reasons to Consider Us:
<ul>
<li>100% remote company</li>
<li>Comprehensive medical, dental, and vision benefits</li>
<li>Short term disability 100% covered by CareRev</li>
<li>Life insurance covered by CareRev</li>
<li>Paid parental leave</li>
<li>Generous paid holidays &amp; unlimited PTO</li>
<li>401K and company match</li>
<li>Office equipment stipend</li>
<li>Learning reimbursement program</li>
</ul>
Physical Requirements: 
<ul>
<li>Prolonged periods of sitting and/or standing at a desk</li>
<li>Prolonged periods of working on a computer</li>
<li>Repeating motions that may include the wrists, hands and/or fingers</li>
<li>Ability to lift up to 15 pounds of work equipment</li>
<li>Ability to set up home office to include desk and chair</li>
</ul>
CareRev is committed to the full inclusion of all qualified individuals. In keeping with our commitment, we will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please discuss with your Recruiter.
We are an equal opportunity employer and will not discriminate against any employee or applicant for employment in an unlawful manner. We celebrate diversity and are committed to creating an inclusive environment for all individuals. CareRev treats all employees and job applicants based on merit, qualifications, and competence without regard to any qualified individuals' sex, race, color, religion, national origin, ancestry, gender (including pregnancy, breastfeeding, or related medical condition), sexual orientation, gender identity, gender expression, age, physical or mental disability, medical condition, genetic characteristic or information, marital status, military, and veteran status, or any other characteristic protected by state or federal law. CareRev also considers qualified applicants with criminal histories consistent with applicable local, state, and federal law.
If you are an applicant in Washington State, Colorado or New York City and have compensation questions, please contact us directly at <a href="mailto:compensation@carerev.com" rel="noopener noreferrer nofollow ugc" target="_blank">compensation@carerev.com</a>. Include in the email request: your Full Name, Job Name, and the City and State in which you reside. Please allow 48 business hours for a response. All other applicants: PLEASE NOTE, this email is not for candidates to apply to jobs directly. Resumes sent via this email address are not in our Applicant Tracking System, and therefore can not be included in our recruiting process. Please Apply following the steps below.

United States

Cybersecurity Risk Analyst

XOR Security

Job Description: 
XOR Security is actively seeking a Digital Forensics Incident Response (DFIR) Analyst to enable our operational counterparts advanced analytics support to promote the rapid analysis of national level cyber threats and incidents.  The ideal candidate will provide technical support of a 24x7 cyber program in the areas of incident  response,  insider  threat  investigations, forensics, cyber threats and information security. 
Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required.  
Position is contingent on successfully completing a program-based background investigation. 
Required Qualifications: 
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering. </li>
<li>Active CISSP. </li>
<li>One or more of the following certifications: GCIA, GCIH, GCFA, GCED, or other Information Assurance Technician (IAT) Level III certification (CASP+ CE, CCNP Security, CISA, CCSP). </li>
<li>Demonstrated understanding  of  incident  response,  insider  threat  investigations, forensics, cyber threats and information security.  </li>
</ul>
<ul>
<li>A minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, forensics, cyber threats and information security.  </li>
<li>A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host- based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint threat detection tools, security operations ticket management.  </li>
<li>Experience creating insider threat focused dashboards, reports and workflow diagrams.   </li>
<li>Experience  collecting  data  and  reporting  results;  handling  and escalating  security  issues  or  emergency  situations  appropriately;  providing incident  response  capabilities  to  isolate  and  mitigate  threats  to  maintain confidentiality, integrity, and availability for protected data.  </li>
<li>Experience with ad-hoc training to junior, mid, senior members of a cyber work force in a collaborative environment. </li>
</ul>
<ul>
<li>Subject matter expert in the field of digital media exploitation or forensics. </li>
<li>Existing Subject Matter Expertise of Advanced Persistent Threat or Emerging Threats. </li>
<li>Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data. </li>
<li>Ability to work on-call during critical incidents or to support coverage requirements (including weekends and holidays when required). </li>
<li>Experience supporting a SOC program in incident response tools and techniques, specifically with forensics tools such as EnCase, Forensic Toolkit, etc. </li>
</ul>
<ul>
<li>Experience with static and dynamic malware analysis, including reverse engineering of binaries. </li>
<li>Familiarity with coding, scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET). </li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms, Data Loss Prevention (DLP) systems, and log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk or ArcSight). </li>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts. </li>
<li>Understanding of hardware configurations and comfort with disassembling and reassembling computers and periphery devices. </li>
</ul>
<ul>
<li>Expert understanding of computer file systems, hard drive architecture and connection types. </li>
<li>In-depth experience with file system forensics, registry analysis, Internet history analysis, steganography and encryption detection and analysis, forensic media imaging, timeline analysis, email analysis, signature/hash analysis. </li>
<li>Ability and experience extracting and managing complex large data sets.  </li>
<li>Strong documentation and written communication skills with technical report writing experience </li>
</ul>
Desired Qualifications: 
<ul>
<li>Experience managing a technical team </li>
<li>Advanced troubleshooting skills </li>
<li>Hard drive and/or cellular phone repair skills </li>
<li>Forensic tool and script development </li>
<li>Metadata extraction and analysis </li>
</ul>
<ul>
<li>Network and intrusion analysis </li>
<li>Mobile/Cellular device analysis </li>
<li>Forensic video analysis </li>
<li>Digital forensic instructor </li>
<li>Software development </li>
</ul>
<ul>
<li>Database analysis/development </li>
<li>Reverse engineering </li>
<li>Application analysis </li>
<li>Network forensics </li>
<li>Intrusion analysis </li>
</ul>
<ul>
<li>Intelligence analysis </li>
<li>Social networking analysis </li>
<li>Law enforcement investigation </li>
<li>Finished intelligence report writing </li>
</ul>
Closing Statement: 
XOR Security offers a very competitive benefits package including paid health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits. 
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V. 
Citizenship Clearance Requirement Applicants selected may be subject to a government security investigation - Applicants must meet eligibility requirements – US CITIZENSHIP.

Alexandria

Digital Forensics Incident Response (DFIR) Analyst

Paragon Cyber Solutions

All Paragon employees must meet the requirements set forth in Executive Order 14042 and the Safer Federal Workforce Task Force Guidance requiring all covered contractor personnel to be fully vaccinated against COVID-19 or qualify for an exemption.Paragon Cyber Solutions is seeking those ready for an exciting and dynamic career as a Security Controls Assessor while supporting critical global operations.Support U.S. Department of Homeland Security (DHS) Science &amp; Technology Directorate (S&amp;T) Office of the Chief Information Officer (OCIO) focuses on providing the tools, technologies, and knowledge products for the nation’s Homeland Security Enterprise. S&amp;T strives to enable effective, efficient, and secure operations across all homeland security missions by applying scientific, engineering, analytics, and innovative approaches to deliver timely solutions in support of DHS's mission.Clearance Top Secret Security Clearance.<h3>Responsibilities</h3><ul> <li>Implementing an IT Security Review and Assistance Program to aid the ISSOs in authoring security assessment and authorization documentation.</li> <li>Scheduling IT security review and assistance visits and ensuring these visits are completed and participating in review and assistance visits.</li> <li>Coordinating with ISSOs and providing guidance and oversight in identifying and documenting deficiencies and prioritizing them based on the mission, risk, and funding.</li> <li>Evaluating configurations and implementation of firewalls, proxy servers, routers, Virtual Private Networks (VPNs), Intrusion Detection System (IDS), wireless networks, etc. against legal requirements, departmental/local policy, industry best practices and vendor recommendations.</li> <li>Ensuring coordination among the DHS Security Operations Center and the Information Security Vulnerability Management Program when vulnerability assessments cross multiple Component responsibilities.</li> <li>Ensuring DHS encryption policy is implemented and enforced and advising project managers on the implementation of DHS encryption standards.</li> </ul>RequirementsMandatory:<ul> <li>7 years of experience as a proven Security Controls Assessor.</li> <li>Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) Certification.</li> <li>Certified Analytics Professional (CAP) or CompTIA Advanced Security Practitioner (CASP+) Certification.</li> </ul>Benefits<ul> <li>Health Care Plan (Medical, Dental &amp; Vision)</li> <li>Retirement Plan (401K w/ employer matching)</li> <li>Paid Time Off (Vacation, Sick &amp; Public Holidays)</li> </ul>

Washington

Security Controls Assessor

ARSIEM

About ARSIEM CorporationAt ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients.  We provide support to multiple agencies across the United States Government.  ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients.  That means a career packed with opportunities to grow and the ability to have an impact on every client you work with. ARSIEM is looking for a Cloud Forensics Analyst. This position will support one of our Government clients in Arlington, VA.
<h3>Responsibilities</h3>
<ul>
<li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.</li><li>Coordinate with enterprise-wide cyber defense staff to validate network alerts.</li><li>Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.</li><li>Perform cyber defense trend analysis and reporting.</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.</li><li>Provide daily summary reports of network events and activities relevant to cyber defense practices.</li><li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of alerts.</li><li>Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.</li><li>Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system, and information.</li><li>Identify and analyze anomalies in network traffic using metadata.</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.</li><li>Identify applications and operating systems of a network device based on network traffic.</li><li>Reconstruct a malicious attack or activity from network traffic.</li><li>Identify network mapping and operating system (OS) fingerprinting activities.</li><li>Assist in the construction of signatures that can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave </li></ul>
<h3>Minimum Qualifications</h3>
<ul>
<li>BS Computer Science, Cyber Security, Computer Engineering, or related degree or HS Diploma &amp; 10 years of network investigations experience. </li><li>Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability</li><li>8+ years of relevant experience in cyber defense analysis using leading-edge technologies and industry-standard cyber defense tools</li><li>Experience successfully developing and deploying signatures</li><li>Experience detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort)</li><li>Experience implementing incident handling methodologies</li><li>Experience implementing protocol analyzers</li><li>Experience collecting data from a variety of cyber defense resources</li><li>Experience reading and interpreting signatures (e.g. snort)</li><li>Experience performing packet-level analysis</li><li>Experience conducting trend analysis Desired Skills</li><li>Python programming experience</li><li>Strong math and science background</li><li>Experience with Carnegie Mellon SiLK tool suite </li></ul>
<h3>Preferred Qualifications</h3>
<ul>
<li>One or more: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, FedVTE • GSEC (SANS401), Arcsight (or other SEIM solution), Network+, Security+</li></ul>Clearance Requirement: This position requires an Active TS/SCI clearance and the ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is 5,000,  and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment.ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.

Arlington

Cloud Forensics Analyst

AnaVation

AnaVation is looking for a talented Security Engineer who is passionate about technology and working with customers and a strong team to provide solutions for our mission-critical customer in Washington, D.C.  The ideal candidate appreciates partnering with our customer and a group of engineers to create innovative engineering solutions.  If you are looking to be challenged, then this is the environment for you!The candidate will be responsible for ensuring that the appropriate operational security posture is maintained for each assigned information system or product. He/she is responsible for the day-to-day implementation, oversight, and maintenance of the security configuration, practices, and procedures for each product under their purview in accordance with the client’s policies and guidelines. The candidate will be a part of a team that supports applications towards obtaining and maintaining their Authority to Operate (ATO).Additional Responsibilities:·        Create security planning/documentation (i.e. Incident Response Plan (IRP), Information System Contingency Plan (ISCP), Change Management Plan (CMP), Business Impact Analysis (BIA), Security Statements, ATO, etc.)·        Manage Security control assessments, monitoring and evaluation·        Create and manage application Plan of Action and Milestones (POA&amp;M)·        Complete Security Awareness Training, report security incidents·        Active collaboration with technical leads, developers and clients to ensure the ISSO’s assigned systems are within FISMA compliance·        Review security artifacts to ensure compliance with NIST controls·        Review system security audit logs and take corrective action as needed·        Ensure all IS security related documentation is current and accessible to properly authorized individuals
<h3>Required Qualifications</h3>
<ul>
<li>Current certification exemplifying skill sets such as those identified in DoD Manual 8570,01-M for IAM level III proficiency (i.e., International Information Systems Security Certification Consortium (ISC²) Certified Information Systems Security Professional (CISSP), the Global Information Assurance Certification (GIAC) [SANS] Information Security Professional (GISP), or the Computing Technology Industry Association (CompTIA) Advanced Security Practitioner (CASP)</li><li>Experience validating work products against the National Institute of Standards and Technology (NIST) Security Controls</li><li>Technical and professional writing expertise</li><li>Experience with MS Office products</li><li>Active Top Secret Security Clearance</li></ul>
<h3>Desired Qualifications</h3>
<ul>
<li>Familiar with Linux and Windows Operating System, Linux is a plus</li><li>Experience working in an Agile environment is a plus</li></ul>

Security Engineer/ISSO

Apply to CASP Cyber Security Jobs in companies remotely and near you. New CASP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cybersecurity Risk Analyst at CareRev	Remote Full Time CISM Comptia Audit
Digital Forensics Incident Response (DFIR) Analyst at XOR Security	Full Time Forensic CCSP Analyst Incident Response
Security Controls Assessor at Paragon Cyber Solutions	Analytics CASP CISM Cissp Clearance
Cloud Forensics Analyst at ARSIEM	Arcsight CASP Clearance Cloud Cyber Defense
Security Engineer/ISSO at AnaVation	Agile C CASP Cissp Clearance

CASP Cyber Security Jobs

0 CASP Cyber Security Jobs. Page 1 of 1

5 closed casp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

CASP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

CASP Cyber Security Jobs

0 CASP Cyber Security Jobs. Page 1 of 1

5 closed casp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

CASP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter