Pinnacol Assurance

Pinnacol Assurance does just one thing, and does it better than anyone: provide caring workers’ compensation protection to Colorado employers and employees. And while we may be a little biased, we believe that our work shapes communities and changes lives.
We have big hearts and love big ideas. We’ve been around for more than  100 years, but don’t let that fool you. Pinnacol is committed to taking care of Colorado employers and workers in the most innovative ways. We celebrate continuous improvement, new ideas, compassion, teamwork, integrity and excellence.
With our number one priority to keep everyone safe, along with the heart of Pinnacol’s “culture of caring” to do what is right and not what is easy, we’re currently having our team members work from home. But we’re still making time for fun with virtual events like virtual painting classes, virtual yoga and Zumba classes, and virtual happy hours!
What you’ll do:
Serve as a Cybersecurity subject matter expert for the organization. Ensure the secure operation of Company’s computer systems, servers, and network connections.
What you can expect:
<ul>
<li>Work as part of a team to implement a security framework resulting in a layered defense-in-depth cybersecurity posture for the organization</li>
<li>Implement systems and controls that monitor and detect unauthorized devices and software</li>
<li>Implement systems and controls ensuring secure configurations for hardware and software on mobile devices, workstations and servers</li>
<li>Implement perimeter defenses implicitly denying connections and permitting access based on principle of least privilege</li>
<li>Implement and maintain continuous vulnerability assessment and remediation systems</li>
<li>Implement systems and policies that limit access and protect data based on principle of least privilege</li>
<li>Implement logging systems capable of monitoring and alerting for anomalous or suspect activities and potential breaches</li>
<li>Implement and support systems for Identity and Access Management resulting in streamlined provisioning, changes and de-provisioning of users</li>
<li>Respond to cybersecurity incidents and breaches by tracking activities, implementing countermeasures and resolving issues in a timely and accurate manner</li>
<li>Conduct penetration testing and red team exercises that test the organizations perimeter and employee response to external attackers</li>
<li>Develop standard work and metrics that result in dashboards measuring the state of cybersecurity program</li>
<li>Working knowledge of public cloud platforms (AWS, Azure and/or IBM or GCP) Cloud platforms</li>
<li>Cloud Security Posture Management (CSPM) knowledge</li>
<li>Maintain system and process documentation</li>
<li>Track work product using ticketing systems</li>
<li>Serve as an organization cybersecurity subject matter expert for various projects, training and assessments as needed</li>
<li>Perform other duties as assigned</li>
</ul>
What you need to be successful:
Bachelor’s Degree strongly preferred.Relevant work experience (similar kind of work at a similar level of work as described in the essential duties) may be substituted for the bachelor's degree. Completion of a degree is encouraged and supported. Two years cyber security experience coupled with five years system, network or development experience required. Must have experience in an incident-driven environment. Solid understanding of security architecture for multiple operating systems, including Windows, Unix and Linux preferred. IT forensics experience preferred. One or more of the following certification preferred:
<ul>
<li>CompTIA: CASP</li>
<li>SANS: GCIH, GCWN, GISF, GISP, GSSP, GICSP, GSSP, GSEC and GCFA </li>
<li>Carnegie Mellon: SEI</li>
<li>ISC2: CCSP, CISSP, CSSLP, SSCP</li>
<li>Cisco: CCNP, CCNP Security, CCIE Security</li>
<li>EC_Council: CEH, ECSP</li>
<li>Microsoft: MCSE (Server), Azure Administrator Associate, Cybersecurity Architect Expert, Azure Solutions Architect Expert o Red Hat: RHCA, RHCE</li>
<li>Splunk: Certified Splunk Architect &amp; Splunk Certified Administrator</li>
</ul>
<h4>We can’t do our work without people like you.Our employees are extraordinary and committed to making a difference. Here’s some of the ways we show our appreciation.</h4>
<ul>
<li>Our benefits go beyond the basics. You’ll get to choose from diverse benefit offerings for medical, dental and vision.</li>
<li>We care about each other. We enjoy a positive, collaborative work environment. We are hard workers and high performers.</li>
<li>We love who you are. Pinnacol is on a journey to embody diversity, equity and inclusion. We’re committed to creating a culture that deeply values differences, where everyone feels like they belong. </li>
<li>Take a day (or 20!) off. Enjoy 20 paid days off your first full year plus 9 paid holidays.</li>
<li>Take care of yourself. Sign up for unique wellness programs, including on-site, company-paid fitness facilities and classes</li>
<li>Get your learning on. We promote a learning culture to help you master your current job and cultivate the skills of the future through a variety of on-site, online, and off-site professional development opportunities.</li>
<li>Give back and get paid. Through our employee volunteer program, Pinnacol in Action, employees receive paid time off to volunteer with Colorado nonprofits.</li>
<li>Share in our success. You’ll have the opportunity to earn a quarterly incentive, up to 20 percent of your annual base salary, when your team exceeds their goals and objectives.</li>
</ul>
When we find the right person, we try to put our best foot forward with an offer that excites you. We consider what you’d like to be paid, the skills and experience you bring, what similar jobs pay in the Denver area and make sure there’s equal pay for equal work among those you’ll be working with. The compensation amount for this role is targeted at $118,500-$124,100. Final offer amounts are determined by multiple factors including your experience and expertise and may vary from the amounts listed above.
Want to love your work? Apply today!
Pinnacol is committed to working with and providing reasonable accommodations to applicants with disabilities. To request assistance with the application process, please email recruiting_team@pinnacol.com.

IS Security Engineer

Optiv

At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry.In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has an impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world.Who are we looking for:The Senior Consultant will be pivotal to problem definition and discovery of the overall solution and guide teams on project processes, deliverables. This individual will drive the technical relationship with our customers and partners by providing advanced architecture, implementation and operational support. Acts as overall industry leaders and leaders of technical excellence providing exceptional services and support to strategic clients setting the bar for others to aspire to.
<h3>How you will make an impact:</h3>
<ul>
<li>Work with customers to help them articulate their business requirements and how those requirements translate into security features and functionality.</li><li>Architect solutions to ensure that the customer's risk transformation requirements are met.</li><li>Assist with development of cyber engagement plans for customers which will enable them to execute upon strategies.</li><li>Rationalize different security solutions against requirements, risk, and constraints.</li><li>Undertake Threat, Vulnerability and Risk analysis methodologies/techniques and the interpretation/application of their output in the definition of Security Architectures.</li><li>Recognized expert across multiple solution areas</li><li>Able to deliver and lead other consultants in complex projects</li><li>Able to present to large groups.  Speaks as an authority.</li><li>Can handle difficult questions and consistently wins support from client audiences.</li><li>Can modify and change methodologies as required.</li><li>Broad awareness of the security/ technology space as a whole</li><li>Contributor to industry groups and/or publications</li></ul>
<h3>Qualifications for success:</h3>
<ul>
<li>Bachelor's degree and approximately 7-12 years of related work experience.</li><li>Approximately 5-10 years of technical architecture experience</li><li>Understanding of relevant industry standards. Specifically, IEC 62443, NERC-CIP and NIST <a href="http://800.82" rel="noopener noreferrer nofollow ugc" target="_blank">800.82</a></li><li>Hands on experience using firewalls, AV, routers, switches, SIEM, hardware SCADA platforms, and/or IPSec tunnels in an industrial setting.</li><li>Very knowledgeable of multiple security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance.</li><li>Understand the Services business and impact decisions have to the organization holistically</li><li>Strong understanding of networking (TCP/IP, OSI model, Purdue), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.).</li><li>Strong understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, specifically NERC-CIP and IEC 62443</li><li>Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration.</li><li>Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems.</li><li>Willingness to travel to meet client needs</li><li>Valid driver's license in the US or Canada and a valid passport required</li><li>The successful candidate must hold or be willing to pursue related professional certifications such as the GICSP, CISSP, CISM and/or CISA.</li><li>Strong interpersonal skills</li><li>Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences</li><li>Possess high standard of integrity and confidentiality</li><li>#LI-BJ1</li></ul>If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cybersecurity solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations – Managed Services, and Identity and Data Management. Optiv remains committed to championing Diversity, Equality, and Inclusion within our organization and throughout the industry. With Optiv you can expect:  • Work/life balance. We offer “Recharge” a flexible, time-off program that encourages eligible employees to take the time they need to recharge as well as 9 paid holidays annually• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities. • The ability and technology necessary to productively work remote/from home (where applicable)• Creative problem-solving and the ability to tackle unique, complex projects• Premium contributions by Optiv to Medical, Dental, and Vision coverage• Contributions by Optiv to Health Saving Accounts (HSA) • Optiv-paid Basic Life, AD&amp;D, Short- and Long-Term Disability• Professional training resources, including tuition reimbursement, certification support and student loan refinancing• Optiv matching contribution to 401(k) with immediate vesting• Health Advocate/ Employee Assistance Program (EAP) – One-on-one help navigating healthcare and insurance systems; confidential Licensed Counseling sessionsOptiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Denver

Senior Consultant II SSI - Remote | USA

AnaVation

AnaVation is seeking a Cyber Threat Analyst to join our team and support our mission critical customer in Reston, VA. As our Cyber Threat Analyst, you will create analysis products based on cyber threat fusion to clearly document significant cyber-attacks or the discovery of new vulnerabilities. The focus of the Cyber Threat Analyst will be on collectively building higher value fusion products, expanding effective lines of communication, knowing lanes of responsibility, and building trust in consistently improving capabilities.Working as a cyber fusion expert, you will conduct research and evaluate technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures focused on the threat to networked weapons platforms and US and DoD information networks. Analyze network events to determine the impact on current operations and conduct all-source research to determine advisory capability and intent. Considered an emerging authority, who applies extensive technical expertise. Develops technical solutions to complex problems. Exercises considerable latitude in determining objectives and approaches to assignment.       
<h3>Required Qualifications:</h3>
<ul>
<li>Clearance: Active TS/SCI Clearance</li><li>Education &amp; Years of Experience: Bachelor’s degree in relevant field and 12+ years of experience related to specific functional area. (May substitute Master’s degree in lieu of 2 years of experience).</li><li>Certifications: CompTIA Security+ or equivalent IAT Level II and currently hold or able to obtain CSSP certification (such as Cloud+ or equivalent)</li><li>Experience and knowledge on:</li><li>Working collaboratively across cross-functional teams of all experience levels.</li><li>Experience working collaboratively with staff at all experience levels to deliver short-term, medium-term, and long-term commitments.</li><li>•xperience completing and coordinate tasks across cross-functional teams in either a lead or supporting role.</li><li>Ability to provide recommendations for enhancing views of device data in bulk and to view associations of all the data related to those devices.</li><li>Experience leading, developing, and delivering inter-discipline and inter-organizational capabilities and processes to improve performance.</li><li>Technical understanding of classified networks, servers, storage, operating systems, applications, and the full stack of supporting technologies.</li><li>Experience working with reporting, automation, and visualization systems to provide situational awareness and making recommendations to improve cyber threat intelligence and fusion capabilities.</li><li>Experience creating, reviewing, and delivering finished intelligence products.</li></ul>
<h3>Preferred Qualifications: </h3>
<ul>
<li>Security certifications: Security+, CCNA Security, CISSP, CySA+, SSCP, CCSP, or equivalent certification</li><li>CSSP certifications: CEH, CFR, CySA+, Cloud+, CCNA Security, GICSP</li><li>AWS, Cloud certifications</li></ul>

Reston

Cyber Threat Analyst

NiSUS Technologies

• Review Nessus scan results and provide direction where required • Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information • Evaluate systems baseline security state verified through Xacta source of record systems • Review and mitigate liens (POAMs)- continuous assessment • Collaborate and develop Splunk use case dashboard reporting for security baseline • Weekly reporting of system health status • 100% Scan compliance validation for systems • Maintain 98% asset accountability for in scope systems • Communicates alerts regarding intrusions and compromises to their network infrastructure, applications and operating systems • Assists with implementation of counter-measures or mitigating controls • Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans • Develops, tests, and operates firewalls, intrusion detection systems, anti-virus systems and software deployment tools • Safeguards the network against unauthorized infiltration, modification, destruction or disclosure • Responds to queries and requests for computer security information and reports • Conducts investigations of computer security violations and incidents, reporting as necessary to management • Researches, evaluates, tests, recommends, communicates and implements new security software or devices • Implements, enforces, communicates and develops security policies or plans for data, software applications, hardware, and telecommunications • Develops materials for computer security education/awareness programs • Provides recommendations to clients on information assurance engineering standards, implementation dependencies, and changing information assurance related technologies • Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance • Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information • Provides advanced guidance and leadership to less-experienced team members • May serve as a team or task leader. (Not a people manager) • Provides information assurance project management, technical security staff oversight, and development of critical technical documents • Ensure compliance with regulations and privacy lawsSchedule: Monday through Friday Day ShiftRequirements<h3>TS/SCI with poly required</h3><ul> <li>10 years of related experience and a Bachelor's degree (or 4 additional years) </li> <li>In addition, position requires Five (5) years of experience as an ISSO on projects of similar scope, type, and complexity are required. </li> <li>Experience is to include at least one (1) of the following areas: knowledge of current security tools and hardware/software security implementation; communication protocols; encryption techniques/tools. </li> <li>On call required for 24x7 support - Essential personnel </li> <li>Strong analytical and problem-solving skills </li> <li>Strong communications skills </li> <li>Ability to lead and work as part of a team </li> </ul><h3>Must have at least one of these certifications:</h3><ul> <li>CCNA Security</li> <li>CySA+</li> <li>GICSP</li> <li>GSEC</li> <li>Security_ CE</li> <li>CND</li> <li>SSCP</li> <li>CASP+ CE</li> <li>CCNP Security</li> <li>CISA</li> <li>CISSP (or Associate)</li> <li>GCED</li> <li>GCIH</li> </ul>Benefits<ul> <li>Health &amp; Life Insurance</li> <li>Dental Insurance</li> <li>Disability Insurance</li> <li>401K Retirement Plan with Matching</li> <li>Tuition Assistance</li> <li>Vacation and Sick Leave</li> <li>Hiring Bonuses</li> <li>Referral Recruitment Program</li> </ul>

Annapolis Junction

G157 - Mid-level Information System Security Officer - Cleared

phia LLC

At phia, we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. Join a highly technical team responsible for responding to the latest breaches (SolarWinds, Microsoft Exchange, Colonial Pipeline) across Fortune 500, Federal, and State/Local organizations.phia has an opportunity for a Cyber Hunt &amp; Incident Response Analyst to support our DHS CISA Hunt and Incident Response (HIRT) deployment Network Analysis team. In this position, you will be on the front line of supporting national and international cyber intrusions teaming with DHS stakeholders to secure America’s critical infrastructure. These engagements entail performing host and network analysis to find the badness. Come join our cutting-edge team working on stopping some of the world’s most advanced adversaries. This position is located in Arlington, VA, with frequent/full remote options during the pandemic/post-pandemic.What You'll Do<ul> <li>Perform analyses on networks running on a variety of platforms and operating systems.</li> <li>Perform analysis of logs/artifacts from a variety of network sources (alerts, application layer protocols, full PCAP, Netflow, etc.) to identify threats.</li> </ul><ul><li>Perform real‐time hunt and incident handling (data collection, intrusion correlation/tracking, threat analysis, and system remediation) tasks.</li></ul><ul><li>Leverage tools including network analysis and collection tools such as Snort, Bro, Suricata, Wireshark, full PCAP, Netflow as part of duties performing cyber incident response analysis.</li></ul><ul><li>Utilize data analytics tools including Splunk to make sense of machine data for hunt and IR missions.</li></ul><ul><li>Collect intrusion artifacts and use discovered data to enable mitigation of badness within the enterprise.</li></ul><ul><li>Track and document hunts and incidents from initial detection through final resolution.</li></ul><ul><li>Write and publish reports (e.g. engagement reports) on incident findings. </li></ul>RequirementsEducation + Experience<ul> <li>Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or related area of study. If no degree is held, candidates must have 7-9 years of hunt/incident response experience.</li> <li>5+ years of relevant experience using hunt/IR network technologies and industry-standard tools.</li> <li>Experience writing thorough cyber investigative reports detailing incident findings.</li> <li>Proficiency with analysis and characterization of cyber-attacks (Kill Chain, MITRE ATT&amp;CK).</li> <li>Proficiency with common TCP/IP protocols, standard application layer protocols - HTTP, DNS, SSH, SMTP, SMB, etc., Wi-Fi networking, network topologies - DMZs, WAN’s, etc. with a demonstrated understanding of how they may be compromised or used in an attack.</li> <li>Substantial knowledge of Splunk (or other SIEM’s) and common network collection/forensic toolsets (Bro, Snort, Suricata, Wireshark, TCPDump/libpcap, Zeek, Gigamon).</li> <li>Ability to characterize and analyze network traffic to identify malicious activity and reconstruct attacks.</li> </ul>Security Clearance<ul> <li> This position will require U.S. Citizenship</li> <li> Must have an active TS/SCI clearance</li> <li> Must be able to obtain DHS Suitability </li> </ul>Desired Certifications<ul> <li>DoD 8140.01 IAT Level II, (CCNA-Security, GICSP, GSEC, Security+ CE, SSCP)</li> <li>IASAE II, (CASP+ CE, CISSP or Associate, CSSLP)</li> <li>CSSP Analyst, GCIA, GCIH, CSSP Analyst/CSSP Incident Responder, CEH - SANS GIAC GNFA </li> </ul>Who You Are<ul> <li>A proactive problem solver that appreciates the challenges of working in a fast-paced, dynamic environment.</li> <li>Intellectually curious with a genuine desire to learn and advance your career.</li> <li>An effective communicator, both verbally and in writing.</li> <li>Customer service oriented and mission focused.</li> <li>Critical thinker with excellent problem-solving skills</li> </ul> If your experience and qualifications aren’t a match for this position, you will remain in our database for consideration for future opportunities that may be a better fit.IMPORTANT: This position may be subject to Executive Order 14042 and the Safer Federal Workforce Task Force Guidance requiring covered employees to be fully vaccinated against COVID-19, which the Federal Government is not enforcing at this time.BenefitsCOMPANY OVERVIEW: Who We Arephia LLC ("phia") is a Northern Virginia based, 8a certified small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis &amp; Incident Response, Cyber Architecture &amp; Capability Analysis, Cyber Policy &amp; Strategy, and Information Assurance/Security. we proudly support various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.phia values work-life balance and offers the following benefits to full-time employees:<ul> <li>Comprehensive medical insurance to include dental and vision</li> <li>Short Term &amp; Long-Term Disability</li> <li>401k Retirement Savings Plan with Company Match</li> <li>Tuition and Professional Development Assistance</li> <li>Flex Spending Accounts (FSA)</li> </ul>phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Arlington

Cyber Hunt &amp; Incident Response Analyst

Apply to Gicsp Cyber Security Jobs in companies remotely and near you. New Gicsp Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
IS Security Engineer at Pinnacol Assurance	AWS Azure CASP CCSP CEH
Senior Consultant II SSI - Remote \| USA at Optiv	CISA CISM Cissp Gicsp Golangvernance
Cyber Threat Analyst at AnaVation	Automation AWS CCSP CEH Cissp
G157 - Mid-level Information System Security Officer - Cleared at NiSUS Technologies	Audits CASP CISA Cissp Encryption
Cyber Hunt & Incident Response Analyst at phia LLC	Analytics CASP CEH CISA Cissp

Gicsp Cyber Security Jobs

0 Gicsp Cyber Security Jobs. Page 1 of 1

5 closed gicsp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Gicsp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Gicsp Cyber Security Jobs

0 Gicsp Cyber Security Jobs. Page 1 of 1

5 closed gicsp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Gicsp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter