Virtual Ciso Jobs in Washington (NOW HIRING)

Job Summary:
Georgia IT, Inc. is seeking a Computer Systems Security Specialist to work onsite in Columbia, MD. The role involves analyzing and defining security requirements, designing and implementing multilayer security solutions, and conducting risk analyses to ensure the security of the agency's data and network.
Responsibilities:
• Analyzes and defines security requirements for MLS issues.
• Designs, develops, engineers, documents, and implements solutions to multilayer security (MLS) requirements.
• Gathers and organizes technical information, as directed, about the agency's data and network security needs, existing security products, and ongoing programs in the MLS arena.
• Performs risk analyses, which also includes risk assessment.
• Implements solutions for projects such as Secure remote access, VPN, Intrusion detection, port scanning, web security and vulnerability assessments and remediation.
• Management of and timely response to web help desk tickets (expectation is a ticket is responded to within 24 hours of receipt on a non-urgent issue, urgent issues should be followed up on immediately and, if travel is involved, response within 4 hours).
• Review security logs, audit data and take required actions.
• Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommended mitigation strategies.
• Monitor and provide initial response for security alerts per procedure; escalate network and server infrastructure alerts per MDSP procedures.
• Perform regularly scheduled penetration testing.
• Escalate issues to CISO, Information Technology Division (ITD), Deputy Director, and ITD Director when necessary, according to Agency procedures.
• Participate in security incident response activities with senior staff when required.
Qualifications:
Required:
• A Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline or four (4) years of equivalent experience in a related field.
• At least six (6) years of experience in analysis and definition of security requirements.
• At least four (4) years of specialized experience in defining computer security requirements for high-level applications, evaluation of approved security product capabilities, and developing solutions to MLS problems.
• Analyzes and defines security requirements for MLS issues.
• Designs, develops, engineers, documents, and implements solutions to multilayer security (MLS) requirements.
• Gathers and organizes technical information, as directed, about the agency's data and network security needs, existing security products, and ongoing programs in the MLS arena.
• Performs risk analyses, which also includes risk assessment.
• Implements solutions for projects such as Secure remote access, VPN, Intrusion detection, port scanning, web security and vulnerability assessments and remediation.
• Management of and timely response to web help desk tickets (expectation is a ticket is responded to within 24 hours of receipt on a non-urgent issue, urgent issues should be followed up on immediately and, if travel is involved, response within 4 hours).
• Review security logs, audit data and take required actions.
• Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations and recommended mitigation strategies.
• Monitor and provide initial response for security alerts per procedure; escalate network and server infrastructure alerts per MDSP procedures.
• Perform regularly scheduled penetration testing.
• Escalate issues to CISO, Information Technology Division (ITD), Deputy Director, and ITD Director when necessary, according to Agency procedures.
• Participate in security incident response activities with senior staff when required.
Preferred:
• One or more of the certifications below are a plus: CompTIA Security+ Certification, Certified Information Systems Security Professional (CISSP), GSEC (GIAC Security Essentials Certification), CCNA or CCNP.
• At least four (4) years of IT experience in data security analysis and risk mitigation within the most recent 5-year period.
• Professional experience with the technologies and methodologies detailed below: Access control, Anti-malware software, Anomaly detection, Application security, Data loss prevent (DLP), Email security, Endpoint security, Firewall management, Intrusion prevention systems, Network segmentation, Security information and event management (SIEM), Virtual private network (VPN), Web security, Wireless security, Cloud security.
Company:
Georgia IT, Inc. provides IT Consulting for a wide range of IT services and custom build turn-key enterprise solutions. Founded in 2007, the company is headquartered in Alpharetta, USA, with a team of 51-200 employees. The company is currently Growth Stage.