JustinBradley’s client, a leading source of mortgage financing, is seeking a highly skilled Data Encryption Analyst who will be responsible for implementing a cryptographic inventory process that includes collecting cryptographic configuration settings from network(s) and applications to identify the use of weak settings, engage respective asset owners, follow-up and track configuration updates. The Data Encryption Analyst will also be responsible for gathering requests for guidance from application teams and working with a cross functional subject matter expert (SMEs) to identify possible solutions and provide guidance. This person preferably has hands-on experience in configuring TLS, including tasks like obtaining a certificate from a trusted CA, installing it on the system, defining cipher suites, and ensuring proper TLS handshake. Prior experience with encryption key management, including implementing policies, monitoring compliance, and ensuring secure handling of cryptographic materials, is preferred.

Must be local to Reston, VA for their hybrid work environment.

Responsibilities:

• Develop and maintain a cryptographic inventory process by collecting and analyzing cryptographic configuration settings from networks and applications.
• Identify and report weak cryptographic settings; coordinate with asset owners to ensure secure updates and improvements.
• Work with application teams to gather requests for cryptographic guidance and collaborate with subject matter experts (SMEs) to propose effective solutions.
• Perform TLS configuration tasks such as obtaining and installing certificates, defining cipher suites, and verifying proper TLS handshakes.
• Assist in implementing encryption key management policies, monitor compliance, and support secure cryptographic material handling.

Requirements:

• 2-3 years of experience in collecting encryption configuration settings from a variety of network and application security tools, correlate, analyze, and provide actionable insights.
• Strong understanding of cryptographic standards and their use (Encryption, Hashing, Digital Certificates, Digital Signature, etc).
• Knowledge of data classification, encryption, and key management.
• Experience in working with any of the following tools: ExtraHop, Nessus, Tenable, Wiz, Splunk, or any other security monitoring tools.
• Strong analytical skills using Excel or Power BI, and problem-solving skills with attention to detail.
• Excellent communication and documentation abilities.
• Working experience in cybersecurity, data security, or data protection operations.
• Thorough understanding of the Public Key Infrastructure (PKI), secure encryption algorithms, modes, and the Transport Layer Security (TLS).
• Understanding of symmetric and asymmetric encryption and respective use cases.
• Familiarity with cryptographic services in AWS.
• Use of scripting languages (e.g., Python) for data manipulation and automation.
• Certifications in information security are nice to have.

JustinBradley is an EO employer - Veterans/Disabled and other protected employees.