Top Tech Jobs & Startup Jobs

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Lead application security efforts: integrate auth/encryption/authorization controls, use SAST/DAST tools to identify and remediate vulnerabilities, educate developers on secure SDLC, and implement compensating controls and firewall rules across web application lifecycles.

Lead and perform security assessments and technical security reviews for classified and unclassified systems. Validate vulnerability scans, apply NIST SP800-53 and DHS 4300A/B controls, develop testing procedures, RoE, SSPs, SARs, and risk analyses, and coordinate with ISSOs, system owners, and developers to ensure DHS SELC and change management compliance.

Perform security monitoring, vulnerability testing, risk analysis and security assessments. Implement and upgrade security controls, establish protocols and requirements, manage IPS/IDS and other security tools, investigate breaches, and coordinate with vendors to remediate issues.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Design, implement, and mature SCDHHS information security and compliance solutions (RMF/CMS MARS-E/NIST/HIPAA). Provide hands-on system support, perform audits and third-party assessments, integrate RMF tasks into SDLC, manage vendor/cloud security, and document findings using eGRC, Bizagi, and Atlassian tools while advising leadership on risk mitigation.

Provide second-level support for Genetec Security Center and associated hardware for the FACS project. Document and coordinate installation/configuration of IP cameras, SV32 devices and door aggregators; receive, log, investigate, and resolve incidents; escalate third-party issues; create architecture, network, installation and configuration documentation; capture resolutions and provide weekly status reports to management.

Perform and support agency information security program implementation and compliance with state standards: interview stakeholders, document processes, develop and track implementation plans (POA&M/CAP), assess controls and documentation, provide recommendations, and facilitate status reporting to ensure progress against NIST/FISMA requirements.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.