"Alerted.org

The purpose of this position is to provide cybersecurity services in the operation of the City’s cybersecurity program. The ideal candidate will be a team player who has experience with large enterprise cybersecurity programs including vulnerability management, security and event monitoring, threat evaluation, risk management, incident response, and compliance activities. The engineer will mentor junior cybersecurity team members, lead cybersecurity operations, perform system architecture reviews, perform risk-based analysis, lead cybersecurity incident response, participate in DevSecOps processes and perform compliance related activities.

Job Responsibilities:

• Lead an enterprise class cybersecurity team.

• Perform compliance activities and audits such as policy reviews, process reviews and third-party security audits.

• Conduct and participate in cybersecurity related investigations and incidents.

• Conduct computer forensic activities.

• Familiar with database, network, virtualization and operational technology operations, concepts and design.

• Perform risk and threat analysis for systems, applications and third parties.

• Evaluate vulnerability and threat information to assess, measure and prioritize mitigations based on risk.

• Participate in DevSecOps processes and familiarity with programming practices, threat modeling, and testing methodologies.

Required Skills:

• Knowledge of principles of cyber security best practices and concepts.

• Experience with performing compliance activities and audits such as policy reviews, process reviews and third-party security audits.

• Familiarity with HIPAA, CJIS, Virginia CDPA along with other Federal and state privacy regulations as they pertain to data privacy and information security control requirements.

• Experience with the monitoring and operation of SEIM applications.

• Experience with configuring and operating an enterprise class anti-virus/anti-malware system including policy, scanning and remediation activities.

• Experience conducting and participating in cyber security related investigations and incidents.

• Familiarity with database, network, virtualization and OT operations concepts and design.

• Experience evaluating application and IT infrastructure for risk and threat assessment.

• Experience with security architecture and security best practices for AWS, Azure, Google Cloud and/or other public cloud platforms.

• Experience with evaluating vulnerability and threat information to assess, measure and prioritize mitigations based on risk.

• Experience in participating in DevSecOps processes and familiarity with programming practices, threat modeling and testing methodologies.

• Familiarity with NIST Cyber Security Framework and ISO 27001 Framework.

Preferred Qualifications

• BS/BA degree in related discipline strongly preferred (i.e. Engineering, Computer Science, or similar technical degree).

• 1+ years’ experience in networking, programming, IT infrastructure or related discipline.

• 5+ years’ experience in cyber security risk management, compliance or threat management or related discipline.

• Holds one or more of the following certifications: Security+, CCNA Security, CCNP Security, GSEC or CISSP

Position Details:

+ Pay Rate / Range: $63

_The above salary range represents the range expected for the position; however, final salary offers are based on a number of factors such as the position’s responsibilities; the candidate’s experience, education, and skills; location; travel required; and current market conditions._

This program requires US Citizenship

+ Benefits (Regular, Full Time Employees):

1. Medical, Dental, and Vision offerings

2. Weekly Direct Deposit

3. Paid Holidays and Personal Time Off

4. 401(k) with match

5. Voluntary Life and AD&D, Short / Long Term Disability, plus other voluntary coverages

6. Pre-Paid Legal and Employee Assistance Programs

7. Northwest Federal Credit Union Membership

8. BB&T @ Work Program

_ABBTECH is an EOE/Minorities/Women/Disabled Individuals/Veterans_