Job Description
Position: Security Architect - Consultant
Location: SC - Remote
Duration: 12 months initial contract
Client: Direct
Daily Duties / Responsibilities
THIS POSITION IS 100% REMOTE AND WILL PARTICIPATE IN AN ON-CALL ROTATION SUPPORTING A 24X7 SECURITY OPERATIONS CENTER SERVING MULTIPLE STATE AGENCIES.
OTHER AFTER-HOURS WORK MAY BE REQUIRED AS NEEDED.
Required Skills (Ranked by Importance)
- BROAD HANDS-ON SECURITY ENGINEERING EXPERIENCE SUPPORTING MULTIPLE CYBERSECURITY TECHNOLOGIES, SYSTEMS, INTEGRATIONS AND OPERATIONAL FUNCTIONS.
- Experience developing security automations, scripts, integrations, utilities and custom tools using Python.
- Strong experience troubleshooting complex technical issues across applications, security platforms, operating systems, networks, identity services and integrations.
- LINUX SYSTEM DEPLOYMENT, CONFIGURATION, PATCHING, SCRIPTING, SERVICE MANAGEMENT, MONITORING, TROUBLESHOOTING AND LIFECYCLE MANAGEMENT
- Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML and vendor SDKs.
- Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security and other enterprise security technologies.
- Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration and industry-standard cybersecurity frameworks.
Preferred Skills (Ranked by Importance)
- HANDS-ON EXPERIENCE SERVING AS A SECURITY ENGINEERING GENERALIST IN A LARGE, MULTI-TENANT, SHARED-SERVICES OR MANAGED-SERVICE ENVIRONMENT.
- Hands-on Linux, Docker, security sensor, monitoring, scripting and platform administration experience.
- Experience supporting SOC analysts, security engineers, incident responders, agency customers and rapidly changing operational priorities.
- Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WUG or other enterprise security technologies and experience developing playbooks, runbooks, procedures and technical documentation
Required Education
- BACHELOR'S DEGREE IN AN INFORMATION TECHNOLOGY, COMPUTER SCIENCE, SOFTWARE ENGINEERING OR INFORMATION SECURITY RELATED FIELD
- EIGHT YEARS OF RELEVANT WORK EXPERIENCE (EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION)
- FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS, SECURITY SYSTEMS, SOFTWARE DEVELOPMENT AND/OR SYSTEM DEPLOYMENTS
Preferred Certifications
- CISSP, Security+, GIAC OR OTHER RELEVANT CYBERSECURITY CERTIFICATION
- LINUX, PYTHON, CLOUD, IAM OR OTHER RELEVANT SECURITY ENGINEERING OR PLATFORM CERTIFICATION