Senior IT Security Analyst

Find out why eXcell is the employer of choice for contractors! Join eXcell and enjoy our generous employee benefits! Our client is currently seeking a Senior IT Security Analyst with five to eight years of experience in an enterprise-level IT organization in the Oil & Gas Industry to join our team! 6-Month Opportunity with Option to Extend This role will start as 100% remote, then ideally transition back to the office in the Breinigsville, PA area. Role Summary:The Information Technology Security Analyst will support the implementation and administration of information security policies, practices, procedures, and technologies in order to ensure the protection of assets (critical infrastructure, networks, systems, applications, and data among others). The Senior Security Analyst will take the team s vision and strategically help develop the roadmap. MUST have experience and knowledge with Security Programs, ICS Foundation and Governance, NIST, and Operation Technology.Responsibilities & Essential Functions include:

• Providing technical assistance with the design, installation, operation, service, maintenance, and security of a variety of multi-user information security systems such as Virtual Private Networks (VPNs) and Active Directory
• Experience with governance and regulatory guidelines
• Security perimeter implementation, monitoring, and providing security guidance and training to the Access Control System Administrators, Systems Administrators, Network Administrators, and/or Database Administrators
• Evaluates information system bug reports, security exploit reports, and other information security notices issued by information system vendors, government agencies, universities, professional associations, and other organizations, and as needed, provides technical direction to protect against reported exploits
• Runs or works with others to integrate and run vulnerability identification software packages and related tools to quickly highlight errors in systems configuration and the need for software updates, patches, and other security-related changes
• Interprets information security policies, standards, and other requirements as they relate to specific internal information systems, and assists with the implementation of these and other information security requirements
• Acts as a technical lead / consultant on information security incident / breach investigations and forensic technical analyses

• Education: Bachelor's Degree in Computer Science, Information Systems, or related field or equivalent experience
• Experience: 5-8 years of relevant experience
• Must have experience in an enterprise-level IT organization
• Strong analysis and troubleshooting skills
• Strong visionary and strategic background
• Proficient knowledge of information security standards such as ISO 27001, ISO 27002, and NIST 800-53, ITIL v3

• CISSP (Certified Information Systems Security Professional) Certification
• GSEC (GIAC Security Essentials Certification)
• CISA (Certified Information Systems Auditor) Certification
• CEH / CPT (Certified Ethical Hacker / Certified Penetration Tester)

• Knowledge of domain structures, user authentication, data encryption, access management, and end user security best practices
• A strong commitment to safety expected
• Strong written and oral communication skills as well as the ability to facilitate team meetings and direct team members' activities effectively
• Strong organizational skills and the capability to meet scheduled deadlines when managing multiple initiatives