IT Security Officer (ITSO) – In this role, you will have extensive experience working with various security products and tools, including Tenable, Splunk, Nessus, and related technologies. The ITSO L2 Engineer will be responsible for managing and monitoring cybersecurity incidents, conducting security assessments, and ensuring compliance with cybersecurity policies and procedures in Command Center
You Will:
Cybersecurity Management:
- Track and manage cybersecurity incidents and key security threat events. Report findings to the Agency as required.
- Track and disseminate security advisories, including threat reports, security directives, and patch recommendations to the Agency.
- Conduct information security awareness training for staff.
- Assist in or conduct tabletop exercises and security risk management activities.
Security Product Management:
- Use Tenable and Nessus for vulnerability scanning and security assessments of applications, including client/server software and mobile apps, to be deployed in corporate networks.
- Utilize Splunk for security event monitoring and log analysis.
- Perform onboarding and vulnerability scanning of computing devices to ensure cyber hygiene before connecting to corporate networks.
Compliance and Reviews:
- Ensure adherence to the customer’s ICT and cybersecurity incident response plan through ongoing security reviews and audits.
- Conduct security assessments of customer ICT systems, including log analysis.
Network and Security Integration:
- Manage and configure security tools and platforms to ensure they are effectively integrated with the network infrastructure.
- Implement and maintain security policies and procedures to protect the organization’s IT assets.
Documentation and Reporting:
- Maintain detailed and accurate documentation of security incidents, assessments, and policies.
- Prepare and deliver reports on security performance, incidents, and compliance.
Collaboration:
- Work closely with other IT teams and external vendors to support and implement security solutions.
- Collaborate with the Agency to ensure alignment with cybersecurity objectives and requirements.