Cyber Security Analyst

Position Overview

• The purpose of this position is to provide cybersecurity services in the operation of the city's cybersecurity program.
• The ideal consultant will be a team player who has experience with large enterprise cybersecurity programs including vulnerability management, security and event monitoring, threat evaluation, risk management, incident response, and compliance activities.
• The Engineer will mentor junior cybersecurity team members, lead cybersecurity operations, perform system architecture reviews, perform risk-based analysis, lead cybersecurity incident response, participate in Dev Sec Ops  processes and perform compliance related activities.

• Lead an enterprise class cybersecurity team.
• Perform compliance activities and audits such as policy reviews, process reviews and third-party security audits.
• Conduct and participate in cybersecurity related investigations and incidents.
• Conduct computer forensic activities.
• Familiar with database, network, virtualization and operational technology operations, concepts and design.
• Perform risk and threat analysis for systems, applications and third parties.
• Evaluate vulnerability and threat information to assess, measure and prioritize mitigations based on risk.
• Participate in Dev Sec Ops  processes and familiarity with programming practices, threat modeling, and testing methodologies.

• Knowledge of principles of cyber security best practices and concepts.
• Experience with performing compliance activities and audits such as policy reviews, process reviews and third-party security audits.
• Familiarity with HIPAA, CJIS, Virginia CDPA along with other Federal and state privacy regulations as they pertain to data privacy and information security control requirements.
• Experience with the monitoring and operation of SEIM applications.
• Experience with configuring and operating an enterprise class anti-virus / anti-malware system including policy, scanning and remediation activities.
• Experience conducting and participating in cyber security related investigations and incidents.
• Familiarity with database, network, virtualization and OT operations concepts and design.
• Experience evaluating application and IT infrastructure for risk and threat assessment.
• Experience with security architecture and security best practices for AWS, Azure, Google Cloud and / or other public cloud platforms.
• Experience with evaluating vulnerability and threat information to assess, measure and prioritize mitigations based on risk.
• Experience in participating in Dev Sec Ops  processes and familiarity with programming practices, threat modeling and testing methodologies.
• Familiarity with NIST Cyber Security Framework and ISO Framework.

• BS / BA degree in related discipline strongly preferred (i.e. Engineering, Computer Science, or similar technical degree).
• 1+ years' experience in networking, programming, IT infrastructure or related discipline.
• 5+ years' experience in cyber security risk management, compliance or threat management or related discipline.
• Holds one or more of the following certifications:
  Security+, CCNA Security, CCNP Security, GSEC or CISSP.

Pay Rate: $68 - $70 / Hour

• k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO