What You Will Do:

The following duties and responsibilities include performing hands-on administration of:

• technologies, logically designing security solutions, and authoring engineering documentation (including project plans, requirements, risks, schedules, and other documents required in a formal Project Management process). Specific responsibilities shall include, but are not limited to the following:

• Author / amend the Board’s Security Engineering program document to serve as the the primary tool for designing the ideal Security Engineering program for the Information Security Branch.

• Support the implementation of a formal Security Engineering program with a variety of product types (e.g., project plans, system designs, network diagrams, formal requirements, test cases, user stories, use cases, and standard operating procedures).

• Document the Board’s network in the form of a network architecture/diagram.

• Support the design and implementation of a robust security infrastructure that protects board data and systems from internal and external threats.

• Support the maintenance and management of Board security toolsets. This might include: tasks such as upgrading software, applying patches, and configuring settings to ensure the the toolset is operating effectively and efficiently.

• Research new security capabilities and recommend solutions that can be employed within the Board’s infrastructure. This could involve identifying new technologies that could help improve the Board’s security posture and making recommendations for their implementation.

• Support the Board’s implementation of a Zero Trust architecture. This might include enhancing identity and access management controls, improving network segmentation, and ensuring sufficient logging and visibility across Board assets.

• Support the Board’s evaluation of the current technology stack and propose opportunities for improvement (e.g., use current technology better, consolidate technology).

What You Will Need:

• US Citizenship

• Minimum of 4 years of experience

• Experience designing and implementing secure networks and systems in either local (on-premises) or cloud computing solutions. This includes creating secure designs and integrating security appliances and technology into local, cloud, and/or hybrid networks.

• Deep understanding of security technologies, including firewalls, intrusion detection and prevention systems, identity and access management solutions, and encryption protocols.

• Familiarity with relevant industry standards and regulations, as well as with software development standards and practices such as the Systems Development Lifecycle, project and program management principles, and Agile development methodologies. This includes, but is not limited to, the Project Management Institute’s Project Management Body of Knowledge (PMBOK) standards, the National Institute of Standards and Technology’s (NIST) Special Publication 800-160 Vol. 2 Rev. 1 “Developing Cyber-Resilient Systems: A Systems Security Engineering Approach,” and NIST’s Cybersecurity Framework 2.0.

• Experience implementing Zero Trust Architecture.

• Experience building dashboards, detection techniques, and other cybersecurity approaches to monitor and defend assets from both external and internal threats.

• Strong writing skills and communication, including experience authoring security engineering program documents.

• Build dashboards, detection techniques, and other cybersecurity approaches to monitor and defend the Board’s assets from both external and internal threats.

• Evaluate security engineering plans and document recommendations. This could include providing advisory services to designs proposed by others or amend designs to include and/or enhance security defenses.

• Attend meetings as required, take meeting notes/minutes, and capture action items on behalf of the Cybersecurity Operations Unit and provide that information back to the team.

What Would Be Nice To Have:

• Degree in Cybersecurity

• Highly desired experience includes the following: Amazon Web Services (AWS), Microsoft Azure, Google Cloud, and Data Centers.

• Highly desired experience includes the following: AWS security technologies, Microsoft Azure security technologies, Google Cloud, Cisco networking appliances, F5, Bluecoat, Palo Alto, VMware, CrowdStrike, Tenable, FireEye, Gigamon, Splunk, and other common enterprise security technology providers