Job Description

·         This position will be responsible for working with Security Operations Center (SOC) team members, and innovation of secure of security solutions for SSA. Responsibilities will include monitoring and maintenance of security stack components for the OCIT Security Program.

·         This position is meant for an experienced security practitioner to help mature the OCIT security program and enabling day to day department businesses to operate securely. Tasks and efforts will include researching, developing, and documentation of security solutions, identifying/mitigating gaps in process and procedure, working with the contractor SOC team, and working with OCIT for the implementation of these solutions.

·         The position also involves developing and briefing various SOC performance reports for the department, conducting, and making recommendations on vulnerability assessments, and providing technical guidance for security incidents.

JOB SPECIFIC DUTIES:

PROVIDE SECURITY ANALYSIS FOR INTEGRATED SECURITY SOLUTIONS RELATED TO DESIGN, DEVELOPMENT, AND MAINTENANCE OF:

·         County Security Assets

·         System level requirements

·         Prepare technical proposals for presentation to stakeholders where updates to existing security technologies or countermeasures would benefit county security posture.

·         Work closely with the Clients SOC Program Manager to identify and recommend process and system improvements to the OCIT security program.

·         Document and create documentation for changes to the current security infrastructure, and provide customer-facing technical presentations as needed.

·         Assist with improving capabilities and execution to effectively optimize and improve OCIT security.

·         Demonstrate an excellent working knowledge of security services and implementations.

·         Assist with SOC project oversight. This includes onboarding and enhancement projects to a multitude of SOC systems.

·         Monitor the Security Information and Event Monitoring [SIEM] system for events and alarms and ensure accurate and adequate resolution by SOC staff.

·         Provide support to SOC staff when issues are escalated.

·         Participate in incident response.

·         Provide management of enterprise security tools including, but not limited to, SIEM, endpoint security, web proxy, email protection, intrusion prevention, and detection system, etc.

·         Monitor and evaluate other county tools, processes, and procedures for compliance with cybersecurity policies, identify deviations, and coordinate efforts to mitigate them.

·         Provide liaison services between County agencies and the SOC.

·         Provide end-user support when required.

Any other activities, reasonably related to the foregoing, as assigned by OCIT.

VENDORS/TOOLS/MANAGEMENT SYSTEMS:

·         LogRythm

·         ServiceNow

·         Cylance

·         Keylight

·         Nessus

·         Microsoft Exchange Online Protection

·         Sourcefire

·         Zscaler

·         McAfee DLP for Network and Host

Company Description

We are a technology solutions company helping organizations accelerate their business innovation and growth through project and talent solutions.