Cyber Security Consultant

Overview

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm serves clients in all 50 states, three Canadian provinces, and Europe.

PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit

Collaborating with our Technology Consulting team, you will help organizations streamline operations and achieve strategic goals to serve the public better. We provide the full spectrum of technology consulting services to help state and local agencies meet operational and program needs that enhance the lives of their user base.

• Strategy, Architecture, Planning, and Procurement
• Business Enablement
• Business Solutions
• Project Assurance
• Perform security assessments of information technology (IT) systems to verify they comply with applicable security standards.
• Perform reviews and assessments of organizational security controls (policies, processes, configurations) to verify they comply with applicable security standards.
• Coordinate and/or conduct penetration testing or simulate attacks to look for vulnerabilities in systems before they can be exploited.
• Coordinate with client organizations (state departments and federal agencies) to perform security audit activities.
• Write and prepare reports that document findings from security assessments and testing.
• Advise project managers of security and privacy requirements required by state and federal agencies.
• Assist with development and implementation of security standards and best practices.
• Interface with various architects, technicians, and business leaders to understand organizational needs, capabilities, and constraints related to IT security.
• Research the latest IT security trends.
• Learns and adapts to new technologies in the ever-changing world of Information Security.
• Create and document security and privacy policies, procedures, or contractual language, as required.
• Establish standard documentation and reporting templates for use in assessments.
• Recommend security enhancements.
• Participate in proposal teams, including writing proposal responses and advising of strategic approaches.

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities or skills of personnel so classified.

• Experience with writing and/or developing system security plans - NIST 800-53
• Experience with databases and SQL; experience with penetration testing
• Experience with cloud architecture and federal standards
• Experience in working with state and federal government agencies
• Excellent interpersonal, verbal and written communication, including good presentation skills
• Ability to multi-task, communicate clearly, learn new technologies and processes, and provide support to process/solution owners
• Strong analytical and conceptual skills
• Ability to thrive in various hierarchical situations
• Ability to work within high-performing virtual teams and highly collaborative
• Builds excellent relationships with key internal resources based on trust and confidence
• Interested in both short-term results and long-term goals
• Ability to work with resources in multiple locations and business units
• Ability to get results while maintaining a service orientation
• Dev Ops experience and automated deployment of applications
• Experience in working with and communicating with technical staff and subject matter experts

• B.S. or B.A. degree is a plus, with related business discipline experience.

• 3+ years of experience in information security or information risk management.
• General operating knowledge of security for application and infrastructure, security threat/risk/data classification.
• Knowledge of industry standards NIST-800,…