Description

Manage information security, cybersecurity architecture, and systems security engineering requirements across the acquisition life cycle.

This role is hybrid.

Responsibilities

• Analyze security impacts of application, configuration, and infrastructure changes within the change management lifecycle.
• Assess configurations of applications, servers, and network devices to ensure compliance with security standards.
• Identify, document, and coordinate the resolution of newly discovered vulnerabilities with system owners, IT teams, and vendors.
• Respond to and investigate security incidents, providing thorough post-event analyses.
• Perform internal application penetration testing and recommend improvements to the security posture.

Required Skills

• 5+ years of experience in information security or cybersecurity roles.
• CISSP certification.
• CompTIA PenTest+ certification.
• CEH (Certified Ethical Hacker) certification.
• Experience with vulnerability tracking and management.
• Experience with incident response and investigation.
• Experience performing application penetration testing.
• Ability to document security architecture and systems engineering requirements.

Preferred Skills

• CompTIA certification.
• Experience conducting annual password security audits and coordinating agency-wide user access audits.
• Document protection needs, security controls, and maintain desk procedures for all security processes.

Key Skills

Education

Any Gradute