Description of Duties and Responsibilities

Works with users to achieve security objectives and address identified risks. Gathers, compiles, and synthesizes information for security processes or systems. Makes recommendations for development of new security systems/procedures or reuse/enhancement of existing security systems/procedures. Analyzes security needs to assess technical feasibility and solutions. Translates security requirements into functional specifications and manages changes. Involved in the full security systems life cycle; designing, coding, testing, implementing, maintaining and supporting software, quality assurance, testing, and deployment. Participates in the development of strategies and plans to achieve security requirements and address identified risks. Develops and validates baseline security configurations for operating systems, applications, networking, and telecommunications equipment. Develop technical documentation (designs, specifications, processes, workflows) and communications. Participates in creating and executing security procedures that ensure that all systems, products and services meet agency security standards, service level agreements and end-user requirements. Analyzes current security processes and procedures to create future configurations which lead to gains in security, efficiency, and cost savings. Consults with users and management with information security risk assessments. Work with users and management to identify, select and implement technical controls. Facilitates information security training and awareness programs.

Minimum Requirements for Entry into Position

A bachelor's degree in information technology systems, computer science, or related field and experience in information technology systems or related area. Relevant experience may be substituted for bachelor's degree on a year-for-year basis.

Preferred Requirements for Entry into Position

Knowledge of security administration for various operating systems and software. Ability to write detailed technical documentation on security policies and procedures. Moderate analytical and problem solving skills. Moderate knowledge and understanding of information risks concepts and principles as a means of relating business needs and security controls. Ability to communicate with audiences with varying levels of technical knowledge. Moderate knowledge of project management implementation. Strong knowledge of cybersecurity principles and practices used in the industry.

Certification:
CompTIA Network+
CompTIA Security+
CompTIA Advanced Security Practitioner (CASP+)
CompTIA Security+ or CISSP (Certified Information Systems Security Professional)