Security Architect - Consultant

This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced consultants, and we are seeking individuals who are highly productive, very flexible, and can work in an environment where fluidity of duties is common. Each team member is expected to contribute with minimal supervision.

Candidates who enjoy working on complex, change-oriented projects with motivated team members will find this position attractive.

The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. This position requires a broad and keen understanding of technology and IT delivery of Security Operation services for on premise and cloud based equipment and critical applications. A strong candidate for this position should possess experience in the following:

• Cyber Threat Response and Incident Handling
• Cyber Security Operations
• Security Service Portfolio Management

DAILY DUTIES / RESPONSIBILITIES:

The Cybersecurity Operations Lead will be in a unique position to help mature our Security Operations Center capability and will work directly for the CISO to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.

Essential Responsibilities

1. Drive innovation and maturation of Security Operations capabilities
2. Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analyst I, II, and III
3. Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution
4. Lead and mentor a team of Security Operations analysts, ensuring they are well-trained and motivated
5. Assist in staffing Security Operations staff
6. Perform threat identification and analysis of risks to the Medicaid Enterprise
7. Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures
8. Consistently review and refine Playbooks, Process, and Alert reviews to identify areas of improvement
9. Assist with advanced threat hunting, looking for attacker presence within the environment
10. Work with Information Technology, Application Development and Business Teams to advance security efforts of the Medicaid Enterprise
11. Lead security team projects, and continuous improvement
12. Collaborate with compliance teams to maintain audit-ready status

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

1. 10+ years of experience of IT working with Windows, Linux, and Web-based applications
2. 5+ years of experience with enterprise infrastructure design and deployment
3. 5 years of related experience in a SOC lead capacity

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):

1. Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.
2. Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements
3. Prior experience in working with eGRC systems

REQUIRED EDUCATION/CERTIFICATIONS:

ANY ONE OR COMBINATION OF:

• CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP)
• GIAC CERTIFIED INCIDENT HANDLER (GCIH)
• SECURITY + PREFERRED EDUCATION/CERTIFICATIONS:
• BS degree in computer science, information technology, engineering or similar discipline
• Cloud certification (i.e. CASP +)
• Network security certifications

ADDITIONAL SKILLS & DUTIES:

1. Ability to communicate clearly, verbally and in writing; to interact effectively with internal and external vendors, project team members, management and agency departments; to build relationships and use facilitation skills with both technical and non-technical personnel
2. Experience in organizing information in a way that is appropriate for technical explanations without losing sight of the needs and aptitude of the audience
3. Ability to work independently and collaborate with multiple teams and vendors
4. Ability to multitask and prioritize tasks effectively in order to meet deadlines
5. Must be intermediate to advanced skills in additional Microsoft Office products (Word, Excel, PowerPoint, Visio) and working with templates and style guidelines for branding consistency
6. Keen attention to detail while maintaining the ability to see the big picture
7. Experience with the evaluation and selection of products and vendors to support initiatives.
8. Ability to accept changes and constructive criticism in a fast turn-around environment
9. A firm understanding of the offerings and capabilities within Cloud service providers and technologies

This is an ongoing project with aggressive timelines. A majority of the team is made up

of experienced consultants, and we are seeking individuals who are highly productive,

very flexible, and can work in an environment where fluidity of duties is common. Each

team member is expected to contribute with minimal supervision.

Candidates who enjoy working on complex, change-oriented projects with motivated

team members will find this position attractive.

WHY IS THIS POSITION OPEN (new role, increased work load, new dept, resignation, promotion)?

If backfill Position – What separated the candidate you initially selected from all the other

resumes presented?

36 Month Renewal: This position is needed to provide direct support to the Office of

Cybersecurity to meet Agency, State and Federal security & privacy goals and

compliance requirements.

SCOPE OF THE PROJECT:

The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity

threat monitoring and incident response capabilities. This position requires a broad and

keen understanding of technology and IT delivery of Security Operation services for on

premise and cloud based equipment and critical applications. A strong candidate for this

position should possess experience in the following:

• Cyber Threat Response and Incident Handling
• Cyber Security Operations
• Security Service Portfolio Management

(CYBER OPERATIONS AND THREAT MANAGEMENT LEAD)

DAILY DUTIES / RESPONSIBILITIES:

The Cybersecurity Operations Lead will be in a unique position to help mature our

Security Operations Center capability and will work directly for the CISO to drive

innovation and maturation of the Agency Cyber threat detection and response

capabilities. We are looking for candidates who are highly organized, can work

independently in a fast-paced environment and produce multiple quality deliverables

within defined deadlines. Candidates should be self-starters, creative problem solvers and

have an eagerness to implement tactics, techniques and procedures which make the most

effective use of Agency staff, resources, products and technologies quickly.

Essential Responsibilities

1. Drive innovation and maturation of Security Operations capabilities
2. Act as an escalation point and provide leadership, mentorship, and guidance to

SOC Analyst I, II, and III

3. Oversee the identification, analysis, and response to security incidents, ensuring

rapid containment and resolution

4. Lead and mentor a team of Security Operations analysts, ensuring they are well-

trained and motivated

5. Assist in staffing Security Operations staff
6. Perform threat identification and analysis of risks to the Medicaid Enterprise
7. Assist in the implementation and advancement of Continuous Monitoring and

Incident Response processes and procedures

8. Consistently review and refine Playbooks, Process, and Alert reviews to identify

areas of improvement

9. Assist with advanced threat hunting, looking for attacker presence within the

environment

10. Work with Information Technology, Application Development and Business

Teams to advance security efforts of the Medicaid Enterprise

11. Lead security team projects, and continuous improvement
12. Collaborate with compliance teams to maintain audit-ready status

REQUIRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

1. 10+ years of experience of IT

working with Windows, Linux, and

Web-based applications

2. 5+ years of experience with

enterprise infrastructure design and

deployment

3. 5 years of related experience in a

SOC lead capacity

PREFERRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

1. Experience identifying, testing and

leading remediation efforts of

OWASP Top Ten, CWE/SANS

TOP 25 Most Dangerous Software

Errors, etc.

2. Prior experience performing

penetration testing and vulnerability

assessments in organizations

subject to FISMA or similar

requirements

3. Prior experience in working with

eGRC systems

REQUIRED EDUCATION/CERTIFICATIONS:

ANY ONE OR COMBINATION OF:

• CERTIFIED INFORMATION SYSTEMS

SECURITY PROFESSIONAL (CISSP)

• GIAC CERTIFIED INCIDENT HANDLER

(GCIH)

• SECURITY +

PREFERRED EDUCATION/CERTIFICATIONS:

• BS degree in computer science,

information technology,

engineering or similar discipline

• Cloud certification (i.e. CASP +)
• Network security certifications

INTERVIEW PROCESS (phone, video or in-

person, how many rounds of i/v’s, etc)?

In-Person, Video

ADDITIONAL SKILLS & DUTIES:

1. Ability to communicate clearly,

verbally and in writing; to interact

effectively with internal and

external vendors, project team

members, management and agency

departments; to build relationships

and use facilitation skills with both

technical and non-technical

personnel

2. Experience in organizing

information in a way that is

appropriate for technical

explanations without losing sight of

the needs and aptitude of the

audience

3. Ability to work independently and

collaborate with multiple teams and

vendors

4. Ability to multitask and prioritize

tasks effectively in order to meet

deadlines

5. Must be intermediate to advanced

skills in additional Microsoft Office

products (Word, Excel, PowerPoint,

Visio) and working with templates

and style guidelines for branding

consistency

Keen attention to detail while

maintaining the ability to see the

big picture

7. Experience with the evaluation and

selection of products and vendors to

support initiatives.

8. Ability to accept changes and

constructive criticism in a fast turn-

around environment

9. A firm understanding of the

offerings and capabilities within

Cloud service providers and

technologies

Requirements

Required Skills

Skill Type

Skill Name

CertificationEducationLicenseOtherSkill Any one of the following certifications: • CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP), GIAC CERTIFIED INCIDENT HANDLER (GCIH), or SECURITY +

CertificationEducationLicenseOtherSkill 10+ years of experience of IT working with Windows, Linux, and Web-based applications

CertificationEducationLicenseOtherSkill 5+ years of experience with enterprise infrastructure design and deployment

CertificationEducationLicenseOtherSkill 5 years of related experience in a SOC lead capacity

Preferred Skills

Skill Type

Skill Name

CertificationEducationLicenseOtherSkill BS degree in computer science, information technology, engineering or similar discipline

CertificationEducationLicenseOtherSkill Cloud certification (i.e. CASP +)

CertificationEducationLicenseOtherSkill Network security certifications

CertificationEducationLicenseOtherSkill Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.

CertificationEducationLicenseOtherSkill Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements

CertificationEducationLicenseOtherSkill Prior experience in working with eGRC systems