What are the responsibilities and job description for the Cybersecurity Specialist position at CEF Industries?
This job was posted by https://illinoisjoblink.illinois.gov : For more
Information, Please See
https://illinoisjoblink.illinois.gov/jobs/13745941
**Summary - Cybersecurity Specialist**
The Cybersecurity Specialist is a hands-on member of the CEF Industries
IT team responsible for day-to-day cybersecurity execution, technical
security controls, cyber resilience, and related compliance activities.
The role works closely with the IT Director and IT Specialist and is
expected to take ownership of assigned security issues, remediation
activities, recurring control reviews, and technical projects.
Cybersecurity is the primary focus of this position; however, CEF
operates with a small, collaborative IT team. The successful candidate
must be comfortable working across technical disciplines and assisting
with general IT troubleshooting, applications, endpoints, servers,
infrastructure, workstation deployments, and end-user technology when
departmental or business needs require it.
This is an onsite position. Regular physical presence at the CEF
facility is required.
**Essential Duties and Responsibilities**
Essential Duties And Responsibilities Include The Following. Other
duties may be assigned.
Own day-to-day cybersecurity operations and follow-through, including
security alert review, threat investigation, incident response support,
coordination with managed security providers, and tracking required
remediation through closure.
Administer and support endpoint and security platforms, including EDR,
vulnerability management, security monitoring, authentication,
password-management, encryption, and related controls. Maintain endpoint
coverage, sensor health, security policies, and response readiness.
Manage vulnerability, patching, and system-hardening activities across
endpoints, servers, applications, network devices, and other technology
platforms. Prioritize findings, apply or coordinate fixes, validate
resolution, document exceptions, and drive identified risks through
closure.
Support identity and access management security controls, including MFA,
SSO, privileged access, authentication technologies, periodic access
reviews, stale account/entitlement cleanup, and other access-control
activities.
Support network security and related infrastructure, including
firewalls, wireless, VPNs, switching, firmware maintenance,
firewall-rule reviews, segmentation, troubleshooting, and implementation
of technical security controls.
Own backup and cyber-resilience activities, including backup-health
review and remediation, validation of backup coverage, restore testing,
disaster recovery exercises, recovery documentation, and improvements to
backup and recovery capabilities.
Perform recurring cybersecurity and compliance activities required by
TransDigm Policies, CMMC, NIST 800-171, Customer Requirements, Or Other
applicable standards. Support audit readiness by collecting evidence,
validating technical controls, maintaining documentation, and assisting
with assessments.
Coordinate cybersecurity testing and risk-reduction activities,
including internal/external penetration testing, remediation of
findings, third-party security/access reviews, security awareness
activities, phishing simulations, and other recurring security-control
validation.
Lead or support cybersecurity and infrastructure projects from planning
through completion. Work with consultants and vendors, understand
contracted scope and responsibilities, coordinate the appropriate
division of internal and external work within the approved project
scope, complete internal prerequisites, track actions, validate
deliverables, test results, document changes, and escalate material
scope, cost, business-impacting, or risk-related decisions to the IT
Director.
Evaluate technical solutions and recommendations with consideration for
cybersecurity risk, business operations, user impact, support bility,
cost, operational practicality, and ongoing administrative workload.
Create and maintain cybersecurity and technical documentation, including
procedures, runbooks, diagrams, incident and recovery documentation,
project records, and evidence supporting recurring control activities.
Maintain awareness of emerging threats and technologies, including
AI-enabled cybersecurity risks.
Serve as a cybersecurity resource for employees and business teams while
working collaboratively with the IT Specialist and IT Director. Assist
with broader IT support and troubleshooting when business or
departmental needs require it.
Serve as the primary after-hours contact for cybersecurity alerts,
incidents, and escalations. Respond to or coordinate investigation and
remediation as required, escalating significant business-impacting
incidents, risk decisions, or situations requiring management
involvement to the IT Director.
Remain flexible to support cybersecurity incidents, maintenance,
patching, planned changes, and project work outside normal business
hours when required.
**Competencies**
To perform the job successfully, an individual should demonstrate the
Following Competencies
Information, Please See
https://illinoisjoblink.illinois.gov/jobs/13745941
**Summary - Cybersecurity Specialist**
The Cybersecurity Specialist is a hands-on member of the CEF Industries
IT team responsible for day-to-day cybersecurity execution, technical
security controls, cyber resilience, and related compliance activities.
The role works closely with the IT Director and IT Specialist and is
expected to take ownership of assigned security issues, remediation
activities, recurring control reviews, and technical projects.
Cybersecurity is the primary focus of this position; however, CEF
operates with a small, collaborative IT team. The successful candidate
must be comfortable working across technical disciplines and assisting
with general IT troubleshooting, applications, endpoints, servers,
infrastructure, workstation deployments, and end-user technology when
departmental or business needs require it.
This is an onsite position. Regular physical presence at the CEF
facility is required.
**Essential Duties and Responsibilities**
Essential Duties And Responsibilities Include The Following. Other
duties may be assigned.
Own day-to-day cybersecurity operations and follow-through, including
security alert review, threat investigation, incident response support,
coordination with managed security providers, and tracking required
remediation through closure.
Administer and support endpoint and security platforms, including EDR,
vulnerability management, security monitoring, authentication,
password-management, encryption, and related controls. Maintain endpoint
coverage, sensor health, security policies, and response readiness.
Manage vulnerability, patching, and system-hardening activities across
endpoints, servers, applications, network devices, and other technology
platforms. Prioritize findings, apply or coordinate fixes, validate
resolution, document exceptions, and drive identified risks through
closure.
Support identity and access management security controls, including MFA,
SSO, privileged access, authentication technologies, periodic access
reviews, stale account/entitlement cleanup, and other access-control
activities.
Support network security and related infrastructure, including
firewalls, wireless, VPNs, switching, firmware maintenance,
firewall-rule reviews, segmentation, troubleshooting, and implementation
of technical security controls.
Own backup and cyber-resilience activities, including backup-health
review and remediation, validation of backup coverage, restore testing,
disaster recovery exercises, recovery documentation, and improvements to
backup and recovery capabilities.
Perform recurring cybersecurity and compliance activities required by
TransDigm Policies, CMMC, NIST 800-171, Customer Requirements, Or Other
applicable standards. Support audit readiness by collecting evidence,
validating technical controls, maintaining documentation, and assisting
with assessments.
Coordinate cybersecurity testing and risk-reduction activities,
including internal/external penetration testing, remediation of
findings, third-party security/access reviews, security awareness
activities, phishing simulations, and other recurring security-control
validation.
Lead or support cybersecurity and infrastructure projects from planning
through completion. Work with consultants and vendors, understand
contracted scope and responsibilities, coordinate the appropriate
division of internal and external work within the approved project
scope, complete internal prerequisites, track actions, validate
deliverables, test results, document changes, and escalate material
scope, cost, business-impacting, or risk-related decisions to the IT
Director.
Evaluate technical solutions and recommendations with consideration for
cybersecurity risk, business operations, user impact, support bility,
cost, operational practicality, and ongoing administrative workload.
Create and maintain cybersecurity and technical documentation, including
procedures, runbooks, diagrams, incident and recovery documentation,
project records, and evidence supporting recurring control activities.
Maintain awareness of emerging threats and technologies, including
AI-enabled cybersecurity risks.
Serve as a cybersecurity resource for employees and business teams while
working collaboratively with the IT Specialist and IT Director. Assist
with broader IT support and troubleshooting when business or
departmental needs require it.
Serve as the primary after-hours contact for cybersecurity alerts,
incidents, and escalations. Respond to or coordinate investigation and
remediation as required, escalating significant business-impacting
incidents, risk decisions, or situations requiring management
involvement to the IT Director.
Remain flexible to support cybersecurity incidents, maintenance,
patching, planned changes, and project work outside normal business
hours when required.
**Competencies**
To perform the job successfully, an individual should demonstrate the
Following Competencies
- Ownership and Results -** Takes responsibility for assigned work,