Cyber Security Engineer

seeking an experienced Senior Security Operations Engineer with in-depth knowledge and hands-on experience in the areas of security policy, intrusion detection/prevention systems, perimeter security Technology, and Information security.

Job Overview:

VDOT is seeking an experienced Senior Security Operations Engineer with in-depth knowledge and hands on experience in the areas of Information Systems security, security policy, intrusion detection/prevention systems, firewalls, anti-virus software, anti-malware, anti-phishing, authentication systems, log analysis and management, web content filtering; network protocols and security/authentication protocols at all layers of the OSI model with emphasis on TCP/IP, web security gateways, network access control, endpoint security, and perimeter security technologies. The Senior Security Operations Engineer contributes to the overall technology roadmap.

Key Responsibilities:

Participates in the design, implementation and support of security infrastructure for the Department.

Identifies network and information security risks across the enterprise, design, engineer, implement security solutions to address the risks at an enterprise level.

Works closely with the IT Division and outside vendors to effectively design, plan, deploy, secure and update network projects in the environment.

Effective collaboration with the Office of Information Security OIS and other ITD groups is maintained.

Strategic Plan items pertinent to the Network Security Operations group are completed.

System policies and procedures are created, documented, and maintained.

Perform network scans and penetration testing. Monitors log analysis and management tools for threats.

Evaluate vulnerability scan results and notify business, application, and infrastructure teams of vulnerabilities in need of remediation.

Evaluate and participate in agency Azure cloud solution review of network, security, and general project involvement.

Ensure all daily functions that are required to maintain security applicable systems and applications are documented.

Work with the agency's ISO team and the IT Auditors to review security audit findings and vulnerability scans results. Identify recommended correction activities and course of action, once determined to communicate with the various stakeholders.

Device configurations are based on best practices.

Relevant documentation is kept up to date.

Coordinating the handling and resolution of incidents related to security.

Required Skills & Qualifications

Information Systems Security:

Considerable knowledge and hands-on experience in security policies and practices.

Experience: 7+ years (Required)

Security Technologies:

Expertise with web security gateways, network access control, endpoint security, and perimeter security technologies.

Experience: 7+ years (Required)

Network & Endpoint Protection:

Strong hands-on experience with firewalls, anti-virus, anti-malware, anti-phishing, and authentication systems.

Experience: 7+ years (Required)

Intrusion Detection & Log Management:

Experience with intrusion detection/prevention systems, log analysis and management, and web content filtering.

Experience: 7+ years (Required)

Network Protocols:

In-depth understanding of network and authentication protocols across all OSI layers, with emphasis on TCP/IP.

Experience: 7+ years (Required)

Risk Management:

Ability to identify, assess, and mitigate security risks; manage day-to-day operations to maintain data integrity, confidentiality, and availability.

Experience: 7+ years (Required)

Incident Response:

Proven expertise in detecting, responding to, and remediating security incidents.

Experience: 7+ years (Required)

Compliance & Documentation:

Hands-on experience remediating System Security Plans (SSP) and Risk Assessments (RA) in cybersecurity.

Experience: 7+ years (Required)

Threat & Vulnerability Management:

Strong background in threat, vulnerability, and risk assessment, and coordinating enterprise-level incident resolution.

Experience: 7+ years (Required)

Penetration Testing:

Considerable knowledge and hands-on experience with web technologies and penetration testing tools.

Experience: 7+ years (Required)

Certifications:

CISSP – Preferred