IT Security Specialist

ECS is seeking a IT Security Specialist to work remotely.  Please Note: This position is contingent upon additional funding.

The IT Security Specialist is responsible for the application security function and for information technology security (Cybersecurity/InfoSec) engineering, and design and serves as a technical expert authority. The OIG’s information resources are sensitive assets and are critical in the performance of its mission; therefore, information security services help safeguard the information resources entrusted to the OIG.

Responsibilities:

• Solve significant problems complicated by interfaces and inter-relationships between and among programs, systems, functions, applications, and numerous critical issues for agency-wide information technology solutions, operations, and maintenance supporting the security of agency infrastructure, systems, and information
• Manages and administers a wide range of security systems and tools:
  • Administers cloud-based security tools such as, Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager); Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal); Microsoft Security and Compliance Center; Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Responsible for primary or alternate management of all IT Security systems including patch management, upgrades, integration engineering, and reporting.
• Executes security related operational activities
  • Manages security incident detection, response, remediation.
  • Conducts cyber threat and vulnerability analysis and remediation.
  • Develops security metrics and manages reporting and compliance.
  • Serves as Incident Response Team member.
  • Supports operational implementation of FISMA/NIST standards and industry best practices.
  • Operates cloud-based security tools such as, Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager); Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal); Microsoft Security and Compliance Center; Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Manages IT Security awareness training program in coordination with the Learning Management team, to including developing and delivering IT Security awareness training modules.
  • Manages Password Management system in coordination with Service Desk.
  • Responds to IT Security trouble tickets generated by customers and IT staff. Identifies solutions, works with customer and OCIO team to execute solutions, and manages ticket input, updates, and resolution in the OCIO ticketing system to maintain service level agreements.
• Supports Security Operations and Engineering by providing technical solution support and expertise
  • Identifies security risks and recommends risk mitigation strategies.
  • Reviews new and existing systems to ensure baseline security requirements are met and to recommend security enhancements.
  • Develops security architecture and technical solutions for security products.
  • Collaborates with staff from OCIO and other business components to develop security controls and solutions for complex business systems and applications.
  • Develops and executes project plans to engineer, construct, deploy, and monitor/manage IT Security infrastructure solutions
  • Demonstrates in-depth understanding of security requirements associated with cloud- hosted environments, services, and solutions.
  • Evaluates, recommends, and implements security controls associated with cloud-hosted environments, services, and solutions.
  • Evaluates, recommends, and implements security controls for mobile device solutions.

Salary Range: $153,000 - $183,000

General Description of Benefits

• Bachelor's Degree in Cybersecurity/Information Technology Security or related field of study from an accredited college or university
• At least 5 years of specialized experience with hands-on skills in performing application security assessments and specialized experience in Secure SDLC and Source Code Analysis (Manual &Tools) on Web-b