Top Tech Jobs & Startup Jobs

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Perform Security Control Assessments and continuous monitoring for State of Michigan applications per NIST guidance. Validate security plans, execute SCA documentation (POA&M, CAP, DTMB-170), interview and test procedures, author remediation recommendations, lead small assessments, and assist vendors and team members with artifact collection to ensure controls meet NIST and state policies.

Install, configure, maintain and troubleshoot network security devices (LAN/WAN/MAN). Test and modify security configurations, provide consulting to state agencies, fulfill service-desk work orders, and maintain device OS/app security. Requires hands-on experience with Cisco ASA 5500-X and/or Juniper MAG and SRX devices. Must pass background check, be on-call and available onsite within 30 minutes, work flexible hours, and meet physical and driving requirements.

Design, deploy, and operate enterprise information security systems across systems, networks, procedures, and operations. Collaborate with staff and the SOC to enhance data collection/correlation, identify gaps, develop prevention/detection/mitigation solutions, produce installation and operational documentation, train agency personnel on security processes, and administer security services as part of a team.

Conduct interviews with business and technical owners to gather policies and procedures; develop and track InfoSec implementation plans; document findings; assess agency documentation for control compliance; facilitate status reporting; collaborate with agencies and provide compliance recommendations.

Manage multiple concurrent statewide information security projects (encryption, MFA, VPN, SIEM, DLP, patching, privileged access, vulnerability assessment). Lead project planning, risk/scope/quality management, vendor coordination, RFP development, knowledge transfer, and status reporting to ensure successful implementation across state agencies.

Contract security consultant to support and coordinate PCI-DSS compliance assessments (annual QSA engagement), prepare and submit evidence, implement and monitor PCI environments, perform vulnerability assessments and security event investigation, manage PCI training, contribute to hardening standards, and participate in incident response.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Design and implement information security architecture and controls. Configure and develop SIEM solutions, administer Tenable Security Center, conduct risk and vulnerability assessments, implement application security, RBAC, IAM, DLP/data discovery, and secure web apps, databases, operating systems and network infrastructure (Cisco/Juniper).

Contract Security Architect / Penetration Tester to perform security assessments and architecture work. Requires 10+ years IT experience across Windows, Linux, mainframe and web apps, 5+ years with firewalls, load-balancing and LAN/WAN. Strong communication, documentation, presentation, collaboration, and MS Office skills are required. 12+ month remote contract.