Cyber Security Engineer

Title: Cyber Security Engineer

State Role Title: Info Technology Specialist III

Hiring Range: $ 111,000 - $140,000

Pay Band: 6

Agency: Virginia Department of Health

Location: VDH-Central Office

Agency Website: https://www.vdh.virginia.gov/

Recruitment Type: General Public - G

Job Duties

Performance Management (for employees who supervise others)
• Serves in a managerial/supervisory capacity to conduct performance management activities and ensure onboarding/offboarding and training for staff
• Establishes and reviews work assignments and priorities and implements performance improvement strategies and/or problem resolution for related issues, in conjunction with program management and Human Resource staff
• Ensures relevant training and workplace safety for staff
• Conducts required performance monitoring and appraisals, establishes clear performance expectations, addresses deficiencies in a timely manner, and documents underperformance in accordance with state guidelines
Supports employee growth through regular feedback, coaching, and professional development opportunities

Data Protection & Security Implementation
• Performing remote or onsite PenTests on all VDH systems, networks, and applications to identify security weaknesses
• Analyze the vulnerabilities and mitigation methods and provide reports which include findings, risks, and conclusions
• Recommend security improvements and methods to mitigate security risks
• Work with VDH IT to determine their testing requirements and create and implementing new penetration testing methods, scripts, and tool
• Develop and implement strategies to safeguard computer data against accidental or unauthorized access, modification, destruction, or other breaches.
• Ensure the integrity of data and systems by conducting regular vulnerability scans, security checks, and updates.
• Ensure that the latest security patches are installed across systems in a timely manner.
• Oversee the maintenance and functionality of anti-virus protection systems, ensuring the latest threat definitions are applied.
• Monitor for new vulnerabilities and respond promptly to emerging security threats.
• Conduct regular risk assessments to evaluate the security posture of data processing systems.
• Ensure that sensitive and confidential information is appropriately encrypted when transmitted across networks to prevent unauthorized access.
• Must have extensive knowledge of SIEM tool such as Splunk. Must be able to on-board new data sources and Ingest logs.
• Periodic review of Errors/warnings reported by internal Splunk logs ▪ Log normalization (CIM); monitoring to ensure nothing has changed (e.g., CIM compliant logs have not changed in structure).
• Expanding log source collection of an existing source type
• Custom script development (e.g., for data collection or integration to non-standard products)
• Deployment Server management to distribute Splunk Universal Forwarder (UF) instances
• Syslog servers that collect data from infrastructure systems (firewalls, IDS, UPS or other syslog generating device)
• Splunk heavy forwarders which can collect information from various databases or third-party systems

Technical Assistance & User Training
• Maintain overall system security, improve server and network efficiency, and train users to promote security awareness and best practices.
• Address security concerns through user education and tailored security protocols.
• Work closely with internal users to understand and support a variety of technical issues, including data access needs, security violations, and programming modifications.
• Serve as a point of contact for users requiring assistance with security-related concerns.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.

Systems Maintenance & Coordination
• Adapt and update security processes, applications, and tools to address evolving software requirements and correct identified errors.
• Coordinate and schedule the implementation of data security protocols, ensuring compliance with both internal policies and external vendor requirements.
• Collaborate with vendors and internal staff to ensure that security measures align with organizational goals.
• Works closely and collaboratively with the information technology team for resolving issues
• Coordinates with IT and Business teams to address security issues in a collaborative manner
• Coordinates secur