CL - Programmer -Project Lead
Posted on :
23-09-2024
Employer Active
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Monthly Salary
Not Disclosed
Salary Not Disclosed
Posted on :
23-09-2024
Job Description
Job Description: Bill Rate:
This is 100% ONSITE there is no option to be remote.
NDA will need to be signed and returned to Tapfin for those selected to interview prior to that date and time.
Email the signed form to ************* and enter the req number and candidate name in the subject line.
Scope of the project:
Enhance the security posture of the South Carolina Department of Motor Vehicles (SCDMV) to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.
Daily Duties / Responsibilities:
Champion DevSecOps through Security Automation: Leverage your fullstack development expertise to design implement and maintain security tools and automation. This includes building scripts to automate critical tasks like data security checks vulnerability scanning and user access control streamlining security processes and improving overall efficiency.
Monitor and analyze security events: Youll be responsible for monitoring security information and event management (SIEM) tools to identify potential threats and suspicious activity. Along with determine security gaps in these controls to improve overall security posture. This will also involve analyzing logs investigating alerts and using your knowledge of security frameworks (NIST CIS CISA) to assess risk.
Support secure application development: Youll collaborate with developers to ensure secure coding practices are followed throughout the Software Development Lifecycle (SDLC). This might involve code reviews threat modeling and providing guidance on secure development principles.
Investigate and respond to security incidents: In the event of a security breach youll be part of the incident response team helping to identify the root cause mitigate damage and implement recovery procedures.
Document security procedures and best practices: Youll develop clear and concise documentation for security policies procedures and best practices. This may involve creating training materials or user guides to ensure everyone understands their role in maintaining security.
Provide oncall support when needed and other related duties as required.
Required Skills (rank in order of importance):
Exceptional communication and interpersonal skills with a proven ability to deliver exceptional customer service through training and documentation.
Expert level experience with C# Python powershell and rust(is a plus)
Understanding of secure by design principles.
Understanding of automation principles including the use of AI ML and scripting to streamline security tasks.
Understanding of the Secure Development Lifecycle (SDLC) and DevSecOps principles to integrate security considerations throughout the application development process.
Proficiency in cloud security principles including identity and access management data security and compliance.
Preferred Skills (rank in order of importance):
Experience with SIEM (Security Information and Event Management) tools including configuration tuning threat hunting and alert creation.
Indepth knowledge of security frameworks including NIST CIS and CISA and their application in a hybrid environment.
Solid understanding of incident response processes and experience in implementing them effectively.
Advanced understanding of security controls including their configuration and implementation in hybrid environments.
Expertise in data classification and DLP (Data Loss Prevention) configuration to safeguard sensitive information.
Required Education:
A bachelors degree in information technology systems computer science cybersecurity or a related field with 3 years experience in a security focused role. Relevant experience may be substituted for the degree on a yearforyear basis
Required Certifications:
Not required however we prioritize applicants who have:
Certified Incident Handler (GCIH)
Certified Computer Security Incident Handler (CSIH)
ECCouncil Certified Incident Handler (ECIH)
ECCouncil Certified Network Defender (CND)
GIAC Critical Infrastructure Protection (GCIP)
GIAC Defensible Security Architecture (GDSA)
Additional Sills: Recommended: NIST Frameworks General understanding of IT Security
Category
Name
Required
Importance
Level
Last Used
Experience
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
