Candidates must have 8 to 10 years of information technology experience, with at least 5 years of recent experience in conducting risk analysis, ensuring telecommunications security, evaluating system vulnerabilities, auditing logs, and developing information security policies and procedures. The most important requirement for this position is demonstrated expertise in a variety of security systems and technologies currently in place. Also required is recent experience with cloud security and advanced threat defense, firewall implementation and system penetration technology, malware detection, and network operating systems (the administration of Windows, Linux, or cloud operating systems is a plus). Experience with information technology security concepts, NIST 800-53 controls and requirements, and the MITRE ATT&CK framework is preferred.
The position requires the following:
Strong oral and written communication skills, especially the ability to explain complex technical material clearly to senior staff, information systems professionals, and both technical and nontechnical users;
The ability to organize and plan effectively;
The ability to analyze and solve complex security problems that demand innovative solutions;
The ability to adapt to evolving circumstances, technologies, and priorities while leading initiatives;
The ability to work effectively with technical and nontechnical colleagues; and
The flexibility to work additional hours as required.
Significant familiarity with the following particulars is a plus: communication backbones, network protocols, LAN/WAN, servers, router configurations, network troubleshooting, data encryption methods, mobile device management and policy platforms, and monitoring and management tools. Candidates must be able to obtain and maintain a top-secret security clearance. A bachelor's degree or applicable certifications are preferred.
TECHNICAL QUALIFICATIONS:
See Qualifications above