Requirements :

• Valid CISSP certification
• Graduation from a 4-year college or university with a major in Computer Science, Cybersecurity, Engineering, Mathematics, or other related area
• Four years of experience as a Cybersecurity Engineer or Network Security Engineer in an organization with over 50,000 users
• Two years of cybersecurity incident response experience

Examples of Duties :

• Plan and execute complex and specialized cybersecurity initiatives, coordinating the activities of contractors, vendors, and staff, and reporting status to the CTO
• Develop cybersecurity policies, procedures, standards, playbooks, trainings, and notices
• Implement new cybersecurity controls in alignment with NIST and CISA frameworks
• Research, recommend and implement security technologies such as VPN, IDS / IPS, SIEM / SOAR, etc.
• Provide operational support for existing security technologies
• Lead and coordinate incident response activities
• Perform cybersecurity risk assessments
• Facilitate team meetings, project status updates, training sessions and other events
• Provide cybersecurity and IT security subject matter advice, findings, and recommendations to CTO and other executives
• Collaborate with technical team members and clients on cybersecurity consultations
• Coordinate third party risk assessments and recommendations
• Assess Business Continuity preparedness and coordinate tabletop planning exercises
• Perform gap assessments of application / system disaster recovery plans

Examples of Security Initiatives :

• Data loss prevention within Google and Microsoft and other environments
• Web application vulnerability assessment and remediation
• Secure remote access and VPN
• NIST assessment and recommendations
• Security Incident and Event Management (SIEM)
• Managed Security Operations Center services
• Incident response plan design and testing
• Firewall tuning
• Internal and external penetration testing
• Ransomware prevention

A large southern California education institution is seeking a Cybersecurity consultant to lead the agency’s cybersecurity program and initiatives.

The individual will be required to research, evaluate, recommend and implement cybersecurity systems, processes and products as well as provide training and guidance to staff.

This position is highly technical and hands-on. This individual must be knowledgeable in cybersecurity theory and best practices, the NIST and CIS frameworks, MS-ISAC tools and resources, incident response planning and coordination.

Effective communication skills are necessary as is the ability to work as part of a team in a large and diverse environment.