You Will:
Cybersecurity Management:
- Track and manage cybersecurity incidents and key security threat events. Report findings to the Agency as required.
- Track and disseminate security advisories, including threat reports, security directives, and patch recommendations to the Agency.
- Conduct information security awareness training for staff.
- Assist in or conduct tabletop exercises and security risk management activities.
Security Product Management:
- Use Tenable and Nessus for vulnerability scanning and security assessments of applications, including client/server software and mobile apps, to be deployed in corporate networks.
- Utilize Splunk for security event monitoring and log analysis.
- Perform onboarding and vulnerability scanning of computing devices to ensure cyber hygiene before connecting to corporate networks.
Compliance and Reviews:
- Ensure adherence to the customer’s ICT and cybersecurity incident response plan through ongoing security reviews and audits.
- Conduct security assessments of customer ICT systems, including log analysis.
Network and Security Integration:
- Manage and configure security tools and platforms to ensure they are effectively integrated with the network infrastructure.
- Implement and maintain security policies and procedures to protect the organization’s IT assets.
Documentation and Reporting:
- Maintain detailed and accurate documentation of security incidents, assessments, and policies.
- Prepare and deliver reports on security performance, incidents, and compliance.
Collaboration:
- Work closely with other IT teams and external vendors to support and implement security solutions.
- Collaborate with the Agency to ensure alignment with cybersecurity objectives and requirements.