Senior Information Technology Security Administrator

Why choose HCSO?  We have a history of stability and excellence.  We continue to maintain and cultivate the highest level of standards and professionalism.  We are unlike any other.  Join the HCSO family!

Compensation Range

$110,393.08-$165,589.62

Starting Salary Range

110393.08-137991.35

Job Description Summary

As part of the Information Technology Security team in the Information Services Division (ISD), maintain data availability, data integrity, and data recovery on premises and in the cloud. Additionally, perform risk analysis and provide mitigation and corrective reports to assist with Sheriff’s Office cybersecurity.

Job Description

Duties & Responsibilities

Duties may vary based on assignment.

• Architect and administer security incident and event management (SIEM) system.

• Administer and coordinate with Managed Security Services Provider (MSSP) and its security solution.

• Ensure all appropriate logs and information are ingested accurately and timely.

• Administer and architect internal network security solution.

• Administer, maintain, and support Forensic Imaging systems (FRED).

• Architect policies and administer the end point detection and response system (EDR).

• Provide technical and operational support for the security architect of cloud services selected by the Sheriff’s Office.

• Administrator and implement new rules and policies for the email protection system.

• Evaluate threat intelligence received prioritizing actions for the existing environment.

• Develop, test, and deploy hardening documents and configurations to reduce configuration and vulnerability risk for servers, endpoints, software, and networks.

• Develop and document recovery strategies, processes, and tests.

• Develop and document security awareness strategies, processes, and tests.

• Develop and implement ongoing hardware and software reviews and inventory.

• Design and administer proactive monitoring of systems utilizing an enterprise monitoring solution.

• Research and introduce new technological innovations.

• Research and recommend solutions to complex issues.

• Design and perform routine security auditing and run compliance/vulnerability scans of systems as required.

• Lead or participate in project planning across ISD sections.

• Provide proactive and well qualified recommendations to purchase hardware, software, and system components to enhance confidentiality, integrity, or availability.

• Lead and perform system modeling, analysis, planning, and budgeting.

• Research and evaluate vendor products and services.

• Oversee the testing of user access reviews, system mitigation reviews, and scheduled attestations, or certificate renewals.

• Communicate effectively at all levels of the organization and with external customers and vendors.

• Proactively develop and document technical processes and procedures to enhance service levels and section efficiencies.

• Identify and proactively maintain security configuration documentation and facilitate changes in documentation and system monitoring as devices are added and retired from the environment.

• Mentor and provide knowledge to section members and overall guidance as needed to division members.

• Remain available outside normal working hours as needed.

• Act as the IT Security Manager as necessary.

• Perform other related duties as required.

Knowledge, Skills & Abilities

• Expert level knowledge of security body of knowledge.

• Working knowledge of the Macintosh Operating System (Mac OS X) in a Windows environment to provide security standards and recommendations.

• Knowledge of Active Directory (AD) to provide mitigation recommendations for an enterprise environment to include global and group policies, organization units (OUs), and delegating authority within the environment.

• Knowledge of enterprise level storage array networks (SAN) and it associated security requirements.

• Mastery of SIEM ingestion feeds, dashboard, and management of same.

• Knowledge of cloud services and cloud security solutions and implementation.

• Demonstrated senior level skill with risk identification and mitigation.

• Skill in local area network (LAN) implementation to address security mitigation implementation.

• Ability to provide