CL - Security Analyst - Consultant

Job Description: Budgeted max bill rate: $90

Remote Work: 0%

PART-TIME 15 hours per week

NDA form required at submission

Scope of the project:
These assignments will focus primarily on establishing and maintaining the SCDMV security posture through vulnerability identification and management, risk assessment and reporting, configuring and maintaining security tools and participating in incident response.

DAILY DUTIES / RESPONSIBILITIES:
1. CONFIGURE, OPTIMIZE, AND MAINTAIN CURRENT SECURITY TOOLS TO INCLUDE NETWORK AND
SERVER MONITORS AS WELL AS VULNERABILITY SCANNERS AND INTRUSION DETECTION.
2. REVIEW FIREWALL REPORTS AND CREATE REPORTS OF ATTACK METHODS AND THEIR RISK TO THE
AGENCY.
3. REWORK OUR VULNERABILITY SCANNING TOOLS TO BETTER ALLOW US TO IDENTIFY RISK.
4. RESEARCH CURRENT SECURITY INITIATIVES AND MAKE RECOMMENDATIONS TO MANAGEMENT

Required Skills (rank in order of Importance):
Nessus vulnerability scanner
Configuration and maintenance
Forescout automation
Assistance with windows updates and patches as required
Vulnerability analysis and remediation methods
Data classification and management tools
Incident handling experience
Security policy and procedures

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
POAM EXPERIENCE
SECURITY PROCEDURE DOCUMENTATION

REQUIRED EDUCATION:
PREFER BACHELOR S DEGREE IN INFORMATION TECHNOLOGY RELATED DISCIPLINE WITH 3 YEARS OF EXPERIENCE OR MINIMUM 5 YEARS RELATED EXPERIENCE.

REQUIRED CERTIFICATIONS:
NOT REQUIRED BUT SECURITY CERTIFICATIONS WILL BE FACTORED IN THE SELECTION PROCESS
Additional Sills: Skills: IT Administration Patch Management Yes 1 Intermediate Currently Using 4 - 6 Years Miscellaneous Configuration management Yes 1 Intermediate Currently Using 4 - 6 Years Network Security information security principles and practices Yes 1 Advanced Currently Using 4 - 6 Years Network Security risk/vulnerability assessments Yes 3 Intermediate Currently Using 4 - 6 Years Network Security Tenable Security Center Administration Yes 1 Advanced Currently Using 4 - 6 Years Networking & Directories INCIDENT MANAGEMENT Yes 2 Advanced Currently Using 4 - 6 Years Specialties Experience in developing and maintaining documentation for policies, procedures, and best practices Yes 4 Intermediate Currently Using 4 - 6 Years Specialties Experience with security and data classification related to CDC, HIPAA, and CJIS Yes 2 Advanced Currently Using 4 - 6 Years Specialties Vulnerability Scanning Yes 1 Advanced Currently Using 4 - 6 Years