Senior Security Analyst

Back

Senior Security Analyst

@ CGI

Position Description:

• We are seeking a Security Analyst who has experience with security incident response, security reporting, and administering Qualys and Splunk SIEM services in a NIST 800-53, and OWASP to join our team.
• This position can be located remotely anywhere in the US; however, the preferred locations are one of our Onshore Delivery Centers: Troy, AL; Lafayette, LA; Wausau, WI; Knoxville, TN; Mobile, AL; Belton, TX; or Lebanon, VA.
• This role is to be completed in a hybrid capacity.
• CGI anticipates accepting applications for this position through March 31, 2025.
• This is a full-time career opportunity to work on a highly visible transformation (Infrastructure services) projects for one of our long-standing government clients!
• This role applies deep technical expertise to the design, implementation, testing, and ongoing support of AWS services.

Your future duties and responsibilities:

How you'll make an impact:

• Performs security administration activities, both hands-on security tool administration and guiding other team members in the execution of security administration and related tasks.
• Serves as a member of the Security Incident Response Team to address issues across development, testing, and production environments in both on-premise and cloud environments.
• Works with peers to review and analyze security tool reports and establish remediation plans.
• Acts as a subject matter expert (SME) for security tools, applications, and processes, including Qualys and Splunk SIEM.
• Works with Information Security Officer to design security solutions in support of policy and operational requirements Thoroughly documents implementations, via technical documentation, diagrams, and run-books.
• Works with peers within and beyond the infrastructure team to define and characterize complex technology or process problems and develop & implement new solutions.

---

Qualifications:

Required qualifications to be successful in this role:

What you'll bring:

• 5 Years experience with security incident response and security reporting.
• At least 2 years' experience in the last 5 administering Splunk SIEM services.
• Experience administering TVM and EDR systems such as Qualys.
• Experience with Security Standards, especially NIST 800-53, and OWASP.
• Understanding of secure-cloud configuration, cloud-security technologies (VPC, CloudTrail, AWS Config, CloudChekr, Security Groups, etc.), and cloud-permission systems (IAM).
• Ability to exercise independent judgment in driving technical security problems to resolution.
• Ability to work across organizations (CGI, Client, Partners, Vendors) to drive issues to resolution.
• Strong written, verbal, and interpersonal communication skills.
• Ability to communicate complex technical information to less technical staff (e.g. CGI management and client staff).

Desired Qualifications/Non-Essential Skills: 

• One or more Splunk Certifications, e.g. Splunk Core Certified User, Splunk Core Certified Admin.
• Bachelor’s degree in Information Science / Information Technology, Data Science, Computer Science, or a related field OR equivalent experience in a technical position OR equivalent military experience
• Ability to mentor other team members in areas of technical expertise
• Experience working in an outsourced/managed services environment with some client-facing responsibilities (e.g. technical discussions with the client)

Skills:

• Network Security
• Splunk

---

How to Apply:

Apply online at https://www.cgi.com/en/careers

Visit Site to Apply