Infinite Group, Inc.

Careers

Work at IGI

 
RSA18.jpg

We’re looking to grow our team with talented business leaders, IT developers, salespeople, and communicators who have a passion for security.

Worldwide spending on information security products and services is forecast to grow to $124 billion in 2019, according to the latest forecast from Gartner, Inc. IGI has carved out a niche in this fast-growing market with a team of highly-skilled security specialists who are developing and delivering best-of-breed security technologies.


 

Cybersecurity Consultant

location flexible

FULL TIME

DESCRIPTION

The Cybersecurity Consultant provides foundational business-focused cybersecurity solutions; including risk assessments, governance, data classification, policies, controls and procedures, awareness, vendor risk management, incident response, & penetration testing. Other responsibilities include supporting delivery of client solutions and helping to solve business-critical problems. This position is a critical member of a cybersecurity-focused professional services team, composed of capable and high-caliber cybersecurity professionals.

RESPONSIBILITIES

  • Consult with clients in a wide range of security domains, including risk assessment, governance, data classification, policies, controls and procedures, vendor management, awareness, incident response, penetration testing and vulnerability assessment

  • Partner with Project Management to deliver communications, plans, timelines and other activities required for successful service delivery

  • A key team member who will deliver the professional services around various security domains

  • Maintain proficiency in and awareness of security services, industry trends, tactics, techniques and procedures

  • Maintain proficiency with security tools, where applicable

  • Act as a supporting cybersecurity resource for clients, sales, and business partners

  • Partner with leadership and support process improvement

  • Travel as needed for customer engagement/delivery

EXPERIENCE/SKILLS

  • 3+ years of relevant information security working experience.

  • Penetration Testing & Incident Response Experience (Red/Blue Team).

  • Experience with offensive security tools such as, Kali Linux, Metasploit, Core Impact, Nessus, BurpSuite, Zenmap/Nmap, and more.

  • Experience creating cybersecurity deliverables.

  • Advanced knowledge of Microsoft Word and Excel.

  • Live experience responding to various cybersecurity-related incidents to include; ransomware, viruses, data exfiltration, malicious insiders, and others.

  • Working knowledge of key cybersecurity tools to support customer delivery.

  • Working experience with regulatory frameworks and standards such as, NIST, ISO, DFARS, PCI, HIPAA, & SOX.

DESIRED CERTIFICATIONS & LICENSES

E-CEH, E-CIH, GCIH, GPEN, CISSP, Security Plus, Network Plus or other applicable security certification(s).

COMPETENCIES FOR SUCCESS

  • Risk & Compliance Management.

  • Plan, lead and deliver cybersecurity solutions to solve business and compliance requirements.

  • Advanced knowledge and experience of the cybersecurity lifecycle, including information asset inventory, risk assessment, data classification, policies, controls and procedures, awareness, vendor risk management and incident response

  • General knowledge of how technical cybersecurity contributes to the cybersecurity lifecycle.

  • Participate in cyber-incident response scenarios, to include training and live/real-world.

  • Conduct team-coordinated and independent penetration testing for client networks.

  • Risk treatment and corrective action plans.

  • Produce and deliver detailed findings and recommendations in professional, accurate and digestible formats.

  • Exceptional written and oral skills, including the ability to succinctly describe findings, make recommendations and communicate them in business terms.

  • Project Management including proficiency with organization of projects, tasks, timelines and communications


Unix-Middleware Patch Management Resource

Eagan, MN

colorado springs, co

FULL TIME

DESCRIPTION

Candidates will be responsible for enterprise level information security protection determining system patching and automation requirements; planning, implementing and testing automation of configuration and patch management solutions; preparing patch management and automation standards, policies, and procedures. The objective of this role is to reduce the time to patch window through effective automation.

FUNDAMENTAL SKILLS

· The candidate will regularly exercise independent judgment, as well as a high level of analytic skill in solving complex technical problems for the customer in the automation environment

  • This individual will work independently with a minimum of guidance or direction

  • Works with Program Managers, Project Managers, Engineering staff, and vendors to manage projects and drive outcomes

  • Create and maintain project plans as necessary then keeps the customer’s management notified of critical failures or potential missed milestones

  • Provides reports to users and managers of systems status on an as-requested basis

  • Provides weekly status reports and maintains hours worked on projects

  • Uses incident and change management procedures as required

  • Escalates unusual or unexpected findings to the customer.

  • Provides action plan for resolution of any/all faults detected

  • Performs isolation testing of problem equipment and/or software

  • Provides and implements escalation process and/or procedures

  • Follows the appropriate quality assurance program chosen by the customer’s Management

  • Provides on-site system or application support for deployment/installation as required

  • Provides documentation of all solutions to problems and document all application guidelines and issues

  • Must be able to obtain a NACI clearance

  • Must be able to work onsite at the Customer’s facility

In addition to the fundamental skills, the following skillset is required.

  • Unix / Middleware Automation - The Automation Engineer will interact directly with other members of the UNIX team, Virtualization team, OS administrators, Middleware team and developers to assist in the ongoing day-to-day management of the Automation and patching environment supporting all of the Unix environments.

  • Uses in-depth knowledge and strong experience of Unix products and scripting tools. (Ansible, Puppet, Chef, Jenkins)

  • Python Scripting

EXPERIENCE LEVEL:

3- 5 years of IT related experience or 5 years equivalent specific systems analyst experience

EDUCATION:

Bachelor's Degree in Computer Science, Information Systems, or other related field. The customer may consider a combination of education, professional training/certification, or work experience.

CERTIFICATIONS: (One or more desired)

  • CompTIA Security +

  • CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker

  • Certified Information System Security Professional (CISSP)"

  • SANs GSEC

  • GCIH

  • GCIA

  • Microsoft MCSE


DMS Patch Management Resource

Eagan, MN

Colorado Springs, CO

FULL TIME

DESCRIPTION

Candidates will be responsible for enterprise level information security protection determining system patching and automation requirements; planning, implementing and testing automation of configuration and patch management solutions; preparing patch management and automation standards, policies, and procedures. The objective of this role is to reduce the time to patch window through effective automation.

FUNDAMENTAL SKILLS

  • The candidate will regularly exercise independent judgment, as well as a high level of analytic skill in solving complex technical problems for the customer in the automation environment

  • This individual will work independently with a minimum of guidance or direction

  • Works with Program Managers, Project Managers, Engineering staff, and vendors to manage projects and drive outcomes

  • Create and maintain project plans as necessary then keeps the customer’s management notified of critical failures or potential missed milestones

  • Provides reports to users and managers of systems status on an as-requested basis

  • Provides weekly status reports and maintains hours worked on projects

  • Uses incident and change management procedures as required

  • Escalates unusual or unexpected findings to the customer.

  • Provides action plan for resolution of any/all faults detected

  • Performs isolation testing of problem equipment and/or software

  • Provides and implements escalation process and/or procedures

  • Follows the appropriate quality assurance program chosen by the customer’s Management

  • Provides on-site system or application support for deployment/installation as required

  • Provides documentation of all solutions to problems and document all application guidelines and issues

  • Must be able to obtain a NACI clearance

  • Must be able to work onsite at the Customer’s facility


In addition to the fundamental skills, the following skillset is required.

  • DMS Automation - The Data Migration Specialist candidate is responsible for analyzing the current methods of data migration from application data formats and structures to modern database formats and providing recommendations for processing and automation. Additional responsibilities include: Extract, transform, and load activities for data; Analyzing the method of transforming existing data into a format for the new environment and the loading of this data into other database structures; Reviewing existing migration tools and providing recommendations for improving performance of the migration process; Providing necessary change and support documentation.

  • Uses in-depth knowledge and strong experience of Oracle and Ansible integration.

EXPERIENCE LEVEL:

3- 5 years of IT related experience or 5 years equivalent specific systems analyst experience

EDUCATION:

Bachelor's Degree in Computer Science, Information Systems, or other related field. The customer may consider a combination of education, professional training/certification, or work experience.

CERTIFICATIONS: (One or more desired)

  • CompTIA Security +

  • CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker

  • Certified Information System Security Professional (CISSP)"

  • SANs GSEC

  • GCIH

  • GCIA

  • Microsoft MCSE