Security Specialist

Position Description

Security Specialist:

• Interprets information security policies, standards and other requirements as they relate to internal information system and coordinates the implementation of these and other information security requirements.
• Redesigns and reengineers internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability.
• Provides highly specialized experience in one or more information, computer, or network security disciplines (e.g., penetration testing, accreditation, or risk assessment and mitigation); develops system security plans, certification and accreditation reviews; analyzes and establishes processes for comprehensive systems and data protection; assesses and mitigates system security threats and risks; performs security audits, evaluation, risk assessments and makes strategic recommendations; and manages, supports, installs and maintains security tools and systems, and tracks security patches and incidents.

Possess knowledge and experience in standard methodologies used in certification and accreditation processes; extensive experience following NIST guidelines in risk assessment and management; conducting vulnerability analysis; developing mitigation plans; and performing penetration testing, password protection testing and application security testing.

• Working knowledge and experience in Internet Security Filtering such as Zscaler Internet Access (ZIA) in a high availability environment that supports 2000 or more users.
• Working knowledge and experience in remote access technologies such as Zscaler Private Access (ZPA) and Pulse Secure SSL VPN in a high availability environment that supports 2000 or more users.
• Knowledge and experience in SSL Automation & Administration using Sectigo and Venafi.
• Knowledge and experience in Secure File Transfer (Globalscape Managed File Transfer) environment.
• Knowledge and experience in Axonius.

This classification must have a minimum of five (5) years of experience applying security policies, standards, testing, modification and implementation. At least three (3) years of that experience must be in information security analysis.

• Two (2) years of experience within the last three (3) years managing, supporting, configuring, and troubleshooting remote access solutions such as Zscaler Private Access and Pulse Secure SSL VPN working with end-users to troubleshoot and resolve remote access-related issues.
• Two (2) years of experience within the last three (3) years managing, supporting, configuring, and troubleshooting Zscaler Internet Access (ZIA) in an enterprise environment that supports 2000 or more users and working with end-users to troubleshoot and resolve remote access related issues.
• One (1) year of experience within the last three (3) years Coordinating technical Cybersecurity troubleshooting efforts and/or security incidents or investigations, root cause analysis, recommending and mitigating effects caused by any given incident in an enterprise environment.

This classification requires the possession of a bachelor’s degree in an IT-related or Engineering field.

Security training and certifications such as ZCCA-IA, ZCCP-IA, ZCCA-PA, ZCCP-PA, CISSP, CISA, or GIAC certifications.