Threat Intel and Vulnerability Management Team Lead

Location: Chesterfield

Title:

Threat Intel and Vulnerability Management Team Lead

State Role

Title:

Info Technology Specialist III

Hiring Range: $120,000 - $140,000

Pay Band: 6

Agency: VA Information Tech Agency

Location:

VA Information Technologies

Agency Website: https://(Use the "Apply for this Job" box below)./

Recruitment Type:
General Public - G

Job Duties

The Virginia Information Technologies Agency (VITA) is excited to offer a competitive opportunity to serve as a Threat Intel and Vulnerability Management Team Lead with the Commonwealth Security Risk Management (CSRM) Division.

The Threat Intelligence and Vulnerability Management Team Lead must be able to work in a fast-paced environment, have excellent communication, presentation and customer service skills, and experience in meeting deadlines and mentoring team members.

As team lead, they shall function as the technical SME for the team by utilizing their strong analytical and problem-solving skills. They will coordinate the day-to-day operations of the team, function as a liaison between internal and external intelligence partners and develop intelligence briefings that will strengthen the security posture of COV systems.

They shall support implementing best practices, security enhancements, and provide notification to management when emerging threats may impact COV systems or data.

Specific responsibilities include the following:

Mentors staff in vulnerability management and threat intelligence gathering, analysis, and development.

Plans and implements improvements to the program through soliciting feedback from staff and customers.

Reviews and approves Security Intelligence Briefs to determine if the appropriate information has been provided to address the threat and to reduce the risk to COV systems and data.

Provides recommendations to management to strengthen the posture of COV data and systems.

Develops communications processes for distributing intelligence information as appropriate.

Research security trends and events in support of the incident response program.

Collects, analyzes, and correlates intelligence information with security incident data to determine what controls need to be prioritized to improve the security landscape of COV systems and data.

Tracks, analyzes, and develops statistics on the COV Threat Management program.

Coordinates with all levels of management to ensure that the COV Theat Intelligence Program is meeting the department and agency's initiatives for Cyber Security.

Serves as a security response liaison between agencies, external directorates, law enforcement, and external partners (MS-ISAC, CISA, etc.).

Partners with internal and external security organizations to monitor security threats and recommends mitigating actions or response.

Join VITA at The Boulders in Richmond, VA, where innovation meets impact! As the Commonwealth's leading IT agency, we're connecting, protecting, innovating, and powering Virginia's digital future through collaboration, creativity, and purpose. Our team thrives in a vibrant, customer-focused environment that values growth, accountability, and forward thinking - all while making technology work for every corner of Virginia.

Minimum Qualifications

Considerable experience preforming Incident Response, Digital Forensics, Vulnerability Management or Threat Intelligence.

Considerable experience in identification, evaluation, and presentation of emerging threats and vulnerabilities.

Considerable experience evaluating security controls and presenting findings and written reports.

Considerable experience within web application scanning tools, vulnerability management tools, and/or threat management tools.

Considerable experience within systems/network administration, TCP/IP networking, and/or Security Operations Center (SOC) or Enterprise Helpdesk experience.

Experience interpreting complex information and providing informed analysis at a level that both technical and non-technical audiences can understand.

Experience as a people leader in the IT Security field.

Experience working all levels of management, internal and external stakeholders such as agencies, service providers, and third-party intelligence organizations.

Experience with interpretation and application of federal and state laws/regulations/standards/policies.

Knowledge of the NIST/SANS RISK framework.

Knowledge of cloud architectures and security.

Additional Considerations

Experience with scripting languages such as Python, Power Shell, etc.

Experience with SQL (standard query language) is a plus.

Experience with containerization platforms (Docker/Portainer/KB/Open Shift/Podman, etc.).

Experience with version control software (Git*/Git Hub/Git Labs/etc).

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

This position is eligible for one (1) day telework.

Applicants must consent to a fingerprint background check.

The…