What are the responsibilities and job description for the Security Specialist position at MIRLOGIC SOLUTIONS CORPORATION?
Position: Security Specialist
Location: Onsite (FBI HQ)
Clearance: Top Secret
About Us:
MirLogic Solutions Corporation is a small business founded in 2008 and located in Alexandria, Virginia. MirLogic brings more than 30 years of multidisciplinary IT experience, technical expertise, and genuine leadership to each project.
We are committed to our clients' successes, and we work closely with each client throughout the life of a project. Our dedication enables us to focus on our clients’ needs and deliver innovative IT solutions that truly address the challenges they face. MirLogic draws on the significant experience of highly skilled management and information technology consultants who can provide organizations with the ability to grow, adapt and transform to the target state.
At MirLogic, we offer Medical, Dental, Paid Time off, Holiday pay, Short- and Long-Term Disability, Life Insurance, 401K, and a Commuter Expense.
Duties and Responsibilities:
- Leads and assists in the delivery of cybersecurity and IT security engineering projects
- Provide guidance to the Supply Chain Risk Management Unit (SCRMU) on identifying, assessing, and managing supply chain risks
- Support the development and implementation of risk management processes for information and communication technology (ICT) procurement and acquisition
- Assist in evaluating ICT supply chain risks and recommending appropriate risk mitigation strategies
- Develop and implement mitigating controls to address identified risks within ICT procurement and acquisition activities
- Collaborate with stakeholders to ensure supply chain risk management practices are integrated throughout the acquisition lifecycle
- Support compliance with FBI policies and federal guidelines related to supply chain risk management
- Creates security architecture standards for the adoption of new technology
- Identifies, quantifies, and recommends actionable, traceable, and exploitable mitigations for security risks as they relate to enterprise projects
- Produces proactive management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure based upon FBI-controlled or requested ICT assets
- Produces assessment workflow metrics that provide unit and senior management with insight into backlogs, prioritization changes, and process improvement to expedite responsiveness to mission customers
- General understanding of Office products such as Word, Excel, and SharePoint for creating and managing asset lists, project requirements, and other deliverables
- Applied understanding of product quality control, auditing, continuous monitoring, and generating standards that normalize assessment products for process improvement and data exploitation
- Understands security product/service cost drivers and industry and business trends impacting the Federal government, with a specific focus on the FBI and IC agencies
- Recognizes and proactively identifies potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion
- Serves as an information security subject matter expert for the Federal government’s assessment of ICT products proposed for purchase or renewal
- Collaborates with FBI enterprise IT management personnel to ensure integration of SCRM efforts with larger enterprise security and operational goals
- Evaluates and recommends security software/hardware and its integration into existing architecture
- Researches and benchmarks security infrastructure technologies as it relates to the organization
Required Qualifications:
- Bachelor’s degree in a technical discipline preferred
- Minimum 7 years of progressive experience in technical roles in cybersecurity
- Experience leading security design and architecture reviews of large applications, systems, and networks
- Experience in leading security reviews of software, including open source, proprietary, and data services
- Experience in technical customer support, including monitoring incident resolution, preferred
- Deep security expertise in at least one of the following (1) Windows and Active Directory, (2) networking/routing/switching and/or applications based on .NET, C or C#
- Some familiarity or experience with Cloud technology or AI preferred
- A track record of success in securing large and complex environments, such as data centers or other industrial spaces