Cyber Security Consultant

Overview

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm is a member of a family of companies with experience in all 50 states, and clients in three Canadian provinces and Europe.

PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit

Collaborating with our Technology Consulting team, you will help organizations streamline operations and achieve strategic goals to serve the public better. We provide the full spectrum of technology consulting services to help state and local agencies meet operational and program needs that enhance the lives of their user base.

• Strategy, Architecture, Planning, and Procurement
• Business Enablement
• Business Solutions
• Project Assurance
• Performs security assessments of information technology (IT) systems to verify they comply with applicable security standards
• Performs reviews and assessments of organizational security controls (policies, processes, configurations) to verify they comply with applicable security standards
• Coordinates and/or conducts penetration testing or simulates attacks to look for vulnerabilities in systems before they can be exploited
• Coordinates with client organizations (state departments and federal agencies) to perform security audit activities
• Writes and prepares reports that document findings from security assessments and testing
• Advises project managers of security and privacy requirements required by state and federal agencies
• Assists with development and implementation of security standards and best practices
• Interfaces with various architects, technicians, and business leaders to understand organizational needs, capabilities, and constraints related to IT security
• Researches the latest IT security trends
• Learns and adapts to new technologies in the ever-changing world of Information Security
• Creates and documents security and privacy policies, procedures, or contractual language, as required
• Establishes standard documentation and reporting templates for use in assessments
• Recommends security enhancements
• Participates in proposal teams, including writing proposal responses and advising of strategic approaches

• Experience with writing and/or developing system security plans - NIST 800-53
• Experience with databases and SQL; experience with penetration testing
• Experience with cloud architecture and federal standards
• Experience in working with state and federal government agencies
• Excellent interpersonal, verbal and written communication, including good presentation skills
• Can multi-task, communicate clearly, learn new technologies and processes, and provide support to process/solution owners
• Strong analytical and conceptual skills
• Ability to thrive in various hierarchical situations
• Ability to work within high-performing virtual teams and highly collaborative
• Builds excellent relationships with key internal resources based on trust and confidence
• Interested in both short-term results and long-term goals
• Ability to work with resources in multiple locations and business units
• Ability to get results while maintaining a service orientation
• Dev Ops experience and automated deployment of applications
• Experience in working with and communicating with technical staff and subject matter expert

• B.S. or B.A. degree is a plus, with related business discipline experience.

• 3+ years of experience in information security or information risk management
• General operating knowledge of security for application and infrastructure, security threat/risk/data classification
• Knowledge of industry standards NIST-800, HIPAA, HITECH, FERPA and various security protocols, such as PKI, SSL, Encryption, Data Redacting, DLP
• Familiarity with Fire Eye, Qualys, Email Security Systems, DLP, Data Encryption Antivirus, SIEM (Log Analysis), IRS…