Cybersecurity Consultant (Remote)

Fastrics is looking for an entry-level Cybersecurity Consultant to join our growing team. This full-time position is for individuals who enjoy a hands-on cybersecurity and technology assessment role in a supportive, team environment.

What you'll do:

• Perform security assessments of technologies such as applications, databases, servers, networking devices (i.e., firewalls and routers), and security tools such as IDS/IPS, anti-malware, and authentication systems (e.g., Active Directory).
• Perform technology assessments in a wide variety of business environments, including assessments of:

                 -Payment Card Industry (PCI) Data Security Standard (DSS) compliance;

                 -Compliance with industry frameworks ( ISO 27001, NIST, and SANS CIS CSC                       Top 10, etc)

                 -Cloud security compliance.

• Perform Business Impact Analyses (BIAs) along with the development of business continuity and disaster recovery plans (BCPs and DRPs).
• Assist organizations with all aspects of information security Incident Response preparation and management.
• Perform IT Audit project tasks to establish an overall foundation for IT environments
• Develop information technology and security policies and procedures.
• Provide trusted advisory services and guidance to clients that will reduce organizational risk and improve their overall cyber security posture.
• Contribute to the team with tasks such as:
• Interviewing selected personnel, gathering, and analyzing information to assess the adequacy of the control environment.
• Communicating and confirming observations identified in the assessment.
• Documenting evidence and maintaining work papers based on established quality standards.
• Writing a robust report to communicate results of the assessment to the company’s relevant stakeholders.
• Collaborating with key management and providing guidance on appropriate resolution of issues, while gaining the confidence and cooperation of the control owners to ensure appropriate input and dialogue on potential risks.

What we're looking for:

General

• Bachelors or Masters (preferred) in Cybersecurity, Information Technology/Systems, Computer Science, Engineering, or IT Risk Management.
• Technology, cybersecurity assessment, or IT audit experience is a plus.
• Ability to effectively communicate, verbally and in writing, to a diverse audience at multiple levels across the organization.
• Strong planning, organization, negotiation, influencing, and collaboration skills.
• Personal qualities like professionalism, attention to detail, a team-oriented focus, dedication, resourcefulness, strong organizational skills, and an eagerness to learn.
• Demonstrate ability to work with limited supervision while managing your own workload.
• Ability to work well under pressure and possess strong problem-solving skills.
• Ability to work remotely at a home-office (up to 100%).
• Willingness to obtain industry-recognized qualifications (e.g., CISSP, CISM, CISA).
• Authorization to work in the U.S., without the requirement for an employment visa or sponsorship.

 Technical Skill Set

• Information system architecture and security controls, including:

1. -Firewalls and routers;
2. -Intrusion detection and prevention systems;
3. -Operating systems (e.g., Windows, Linux, Unix, iSeries);
4. -Remote access systems;
5. -Applications;
6. -Databases (e.g., SQL, Oracle, DB2); and
7. -Symmetric and asymmetric cryptography.

• Systems Development Life Cycle (SDLC) and change management;
• Information system implementation processes;
• Systems administration and computer operations;
• Threat and vulnerability management;
• Incident response preparation and management;
• Data backup and recovery practices;
• Logical access controls (e.g., Active Directory); and
• Physical and environmental security controls.
• Coding and/or scripting languages (Python, JavaScript, PowerShell, Visual Basic).

Includes full benefits including 401k with employer match incentive.