The Office of Cybersecurity is tasked with securing the Agency cloud infrastructure and performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. A strong candidate for this position should possess experience in the following by priority:
1. Cyber Threat Response and Incident Handling
2. Cloud platforms such as Amazon Web Services (AWS)
3. Cloud Security
4. Security Architect and/or Engineering
5. Azure, Google Cloud Platform (GCP)
DAILY DUTIES / RESPONSIBILITIES:
The Cloud CyberSecurity Specialist will help Applications Team build and manage a Secure Cloud Infrastructure by adhering to Agency policy and industry best practices.
This position will report directly to the Security Operations Manager to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. This role is involved in projects or issues of high complexity that requires an individual who can quickly think on their feet, challenge the status quo, and drive efficiencies through the process.
Essential Responsibilities
1. Perform threat identification and analysis of risks to the Medicaid Cloud Based Systems
2. Provide input and feedback on cloud/hybrid architectures related to Security
3. Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures
4. Perform regular security audits of resources deployed in the Medicaid Cloud Based Systems
5. Assist in investigation and remediation of security incidents and issues
6. Serve as Security Subject Matter Expert for Secure Cloud Infrastructure
7. Consult on, and provide requirements for critical projects and initiatives
8. Create documentation on specific remediation steps to close vulnerabilities or mitigate risk to acceptable levels
9. Create documentation that can readily to be added to Agency procedures
10. Revise documents and artifacts as tactics and techniques evolve to address new and emergent threats and trends
11. Work with Information Technology, Application Development and Business Teams to advance security efforts of the Medicaid Enterprise
12. Raise the awareness level of cloud security in the agency
13. Conducts security assessments to identify areas of risk and ensure gaps are remediated
14. Effectively communicates to management and business stakeholders the status of projects and issues as they relate to Cloud Security
REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. 10+ years of experience of I.T. working with Windows, Linux, Cloud technologies and Web-based applications
2. 2-4 years of experience with Cloud Security monitoring and incident response
3. A firm understanding of the offerings and capabilities within Amazon Web Services (AWS) and/or GCP and Microsoft Azure platforms
4. Ability to communicate clearly, verbally and in writing; to interact effectively with internal and external vendors, project team members, management and agency departments; to build relationships and use facilitation skills with both technical and non-technical personnel
5. Ability to write, edit, and prepare graphic presentations of technical information for both technical and business personnel
6. Ability to collaborate and coordinate with multiple teams and vendors
7. Ability to work independently and as a member of a team
8. Ability to multitask and prioritize tasks effectively in order to meet deadlines
9. Keen attention to detail while maintaining the ability to see the big picture
10. Ability to absorb and retain complex processes
11. Experience with the evaluation and selection of products and vendors to support initiatives.
12. Ability to accept changes and constructive criticism in a fast turn-around environment
PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. 3+ years of experience with Cloud platforms such Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP)
2. Prior experience working with cloud security and governance tools, cloud access security brokers (CASBs), and infrastructure as a code
3. Experience with deployment orchestration, automation, and security configuration management of AWS native tools
4. Experience with full-stack deployment
REQUIRED EDUCATION/CERTIFICATIONS:
ANY ONE OR COMBINATION OF:
• CLOUD CERTIFICATION (I.E CCSP)
• GIAC CERTIFIED INCIDENT HANDLER (GCIH)
• SECURITY +
• OR SIMILAR WITH VALID EXPERIENCE
PREFERRED EDUCATION/CERTIFICATIONS:
• BS degree in computer science, information technology, engineering or similar discipline
• Network security certifications
