Description

Assess the security of complex integrated applications and high-volume online systems. Own the integrity of internet-accessible databases and 24/7 infrastructure.

Responsibilities

• Test security and penetration vulnerabilities across cloud, virtualization, and multi-tier application environments.
• Perform OS hardening for Windows and Linux systems.
• Audit network security including routing protocols, Layer 2/3, DNS architecture, and WAN infrastructure.
• Evaluate availability, backup, recovery, and data integrity for high-volume systems.
• Assess security for internet-accessible databases containing confidential information.

Required Skills

• 3+ years of experience assessing complex integrated applications and high-volume systems.
• 3+ years of testing experience in security and penetration/vulnerability testing.
• Proficiency in HTTP, TCP/IP, and encryption.
• Experience with database security, SQL vulnerabilities, and Microsoft SQL Server.
• Knowledge of Microsoft .NET Framework, IIS, and Web Services security.
• Experience with Azure Government hosting and Azure Services.
• Competency in Microsoft Windows Services and Active Directory.
• Understanding of SOAP and public website security.
• Valid CISSP certification.

Preferred Skills

• 3+ years of experience in security planning and implementation for large-scale government system integration.
• Experience assessing risks for Reporting Services, internal web applications, and multi-node networks.
• Knowledge of SOX, NIST, and State Administrative Manual (SAM) Section 5300.

Key Skills

Education

ANY GRADUATE