OVERVIEW:

You’ll be amember of the Security Operations Team and collaborate with our teams onprojects and operational work, as part of our security program to meetTransportation Security Administration Security Directives. This position willwork closely with IT&S Compliance and other technical teams. The primarypurpose of this position is to ensure Information Technology & Services(IT&S) Department is compliant with state and federal regulations byidentifying, evaluating, prioritizing, monitoring, and reporting on theeffectiveness of operational controls within Information Technology (IT) andOperational Technology (OT) environments.

Security Monitoring / Incident Response

·Investigatepotential security incidents to determine what occurred

·Respondto security incidents including leading the response for smallerincidents 

·Apply client context to potential incidents to better understand potentialsecurity incidents 

·Collaboratewith your team and the managed service provider to update incident remediationplans

·Buildand develop the investigative program through collaboration and influence

·Automateresponse and investigative functions

·Provideco-ordination and crisis management between engineering groups and securityresponders during high severity incidents

·Developand report on key performance indicators to show the effectiveness of oursecurity monitoring / incident response processes as well as our managedservice provider

·Maketechnical decisions about our how we work with our managed service provider

Security Consulting

·Collaborateon projects to ensure that security issues are addressed throughout the projectlifecycle

·Reviewsystem designs and identify areas for security improvements

·Providead hoc consulting on tactical security topics

General

·Evaluatesecurity risks and their impact to the client

·Createtechnical documentation for other analysts and teams

·Maketechnical decisions on behalf of the client when working with the managedservice provider

·Developand track key performance indicators for managed service provider

·Whilethe security monitoring and incident response responsibilities mean that thereis an afterhours component to this role, typically it is less than one hour perweek.

Requirements

·Minimumof six years' IT, industrial control systems, or information securityexperience. Additional years’ of knowledge/complexity ofassignments/experience required for level 3.

·Bachelor'sdegree or equivalent additional work experience

·ITILFoundations certified or successful completion within 90 days of starting

Technical Competency

·Asolid understanding of security priorities and concepts 

·Technicalknowledge of mainstream operating systems, complex applications, identity andaccess management technologies, security information and event management, orendpoint security solutions.

Occupational Personality

·You’llinteract with company personnel at various levels to understand businessimperatives.

·Strongtechnical communication skills will be key to your success. Your written andverbal communication skills will help you succeed, as will your ability tocommunicate security concepts and situations to audiences with varying levelsof familiarity with these concepts.

·Leadershipabilities with the capability to direct other technical staff on securityinitiatives and guide team members 

·You’llget to work with minimal supervision. Strong analytical skills to analyzesecurity requirements and relate them to appropriate security controls.

·Yourability to manage expectations appropriately will help and build long-termrelationships. You’ll remain currentwith industry trends and evolving threats.