Cybersecurity Assessor

🕒 il y a 1 mois

🤠 Texas – Distant

🤠 Texas – Remote

💵 $80 000 - $120 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Apollo Information Systems

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2002

💼 Conseil

🏥 Santé

📦 Logistique

💰 €5 000 000 Seed Round - Apollo Information Systems en 2025-02

Consulting • Healthcare • Logistics

Apollo Information Systems est un cabinet de conseil en cybersécurité dirigé par l'intelligence et un fournisseur de services gérés qui propose des solutions de sécurité sur mesure couvrant la planification, la mise en œuvre et les opérations. Depuis plus de deux décennies, l'entreprise offre des services de conseil stratégique en sécurité, des services de vCISO, des évaluations et tests, le développement de programmes de sécurité, le déploiement de technologies (SIEM, XDR/MDR), la détection et réponse gérées, la réponse aux incidents, la criminalistique numérique et le soutien à la sécurité électorale pour les gouvernements des États et locaux, les institutions éducatives, et les entreprises. Apollo se concentre sur des engagements de sécurité modulaires et alignés sur la mission - évaluer et conseiller, mettre en œuvre et sécuriser, surveiller et détecter, et répondre et récupérer - pour renforcer la posture de sécurité des clients et optimiser les investissements en sécurité.

Description

• Independently plan and lead hands-on cybersecurity assessments across enterprise, cloud, and public-sector environments — including election infrastructure at the county, city, and state level. • Evaluate the design and operating effectiveness of technical controls spanning identity and access management, endpoint protection, patch and vulnerability management, secure configuration, network segmentation, data protection, logging/monitoring, and incident response. • Review and interpret technical configurations and artifacts — firewall rulesets, GPOs, hardening baselines, cloud security configurations, IAM policies, and logging setups — to validate control implementation. • Conduct stakeholder interviews and documentation reviews to understand policy, process, and control maturity. • Assess client environments against established frameworks and standards including NIST CSF 2.0, CIS Controls, ISO 27001, CMMC, CJIS, HIPAA, and PCI DSS. • Produce detailed assessment reports with prioritized risk findings, maturity ratings, and pragmatic, business-aware recommendations. • Map findings to client risk and business context, translating technical gaps into clear remediation roadmaps. • Present findings and recommendations to client stakeholders ranging from technical practitioners to executive leadership. • Drive continuous improvement of Apollo’s assessment methodologies, workbooks, tooling, and report templates. • Mentor junior assessors and perform peer review of assessment deliverables. • Collaborate with consultants, engineers, advisors, and project managers to deliver high-quality engagements. • Stay current with emerging threats, technologies, and regulatory developments.

🎯 Exigences

• Experience in cybersecurity, with demonstrable experience leading or performing security assessments (confirm threshold) • Direct, hands-on experience assessing environments against one or more recognized frameworks (NIST CSF, CIS Controls, ISO 27001, CMMC, CJIS, HIPAA, or PCI DSS) • Strong working knowledge of security controls across operating systems, network infrastructure, cloud services, and identity systems. • Ability to independently review and assess technical configurations and documentation (firewall rules, GPOs, hardening baselines, logging setups, cloud configs) • Excellent written communication and the ability to produce client-ready reports, plus the ability to explain technical findings in plain language to non-technical audiences. • Experience working with clients in a consulting capacity and managing multiple concurrent engagements. • One or more relevant certifications — e.g., Security+, CySA+, CISA, GIAC (e.g., GSEC), or assessor-specific credentials such as CMMC CCP/CCA. • Hands-on familiarity with Microsoft 365 and Azure (and exposure to AWS or GCP). • Experience with security tooling — vulnerability scanners, SIEM/EDR platforms, and configuration analyzers. • Experience supporting public sector clients, election infrastructure, or regulated industries.

🏖️ Avantages

• Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans • Unlimited PTO, 7 paid sick days, and 11 paid holidays • 401(k) with 4% company match after 90 days, immediately vested • Company‑paid life insurance at 1x annual salary • Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage • $125 monthly home‑office tech stipend for internet, equipment, and other technology needs • Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture