Job description
The success of Mecklenburg County rests on strong, competent talent at all levels of the organization. Whether your passion is architecture, development, quality services, engineering, desktop support, or operations, we have a position for you. If you enjoy working with the public and are looking for a career where your work is important to the community, come be a part of Mecklenburg County and help us provide a community of pride and choice for people to live, learn, work, and recreate.
POSITION SUMMARY
Assists in the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines). This position, under general supervision, develops, evaluates, and manages systems security across the enterprise. Additionally, this position prepares status reports on security matters to develop security risk analysis scenarios and response procedures; enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports, and investigates possible security exceptions, updates, and maintains and documents security controls; and educates users on systems security standards and procedures.
Depending on the assigned area of concentration, this position may work in the Security Operations Center, the Identity and Access Management team, or the Compliance Team. Areas of concentration include account management, password auditing, network-based, and Web application-based vulnerability scanning, virus management, and intrusion detection.
ESSENTIAL FUNCTIONS
General
- Vendor and Contract Management: manage performance and partnerships with vendors who supply products used for security purposes. (email product vendors, vulnerability scanning product vendors, special security product vendors); determine the best methods to maintain all products, and when the maintenance should take place; determine when vendors should be called for assistance: and determine when a vendor is missing Service Level Agreements (SLA)
- Documentation: document processes, procedures, and events.
- Information Security Strategic Planning: initiate and suggest improvements to existing security and network architecture, based on evolving business needs.
- Strategic Evaluation and Review: evaluate current security technologies and processes, and research new security technologies and processes.
- Participation in Interview Process: participate in the interview process for new hires and in identifying skill sets for new positions.
- Contributions to Business Process: Lead and engage ongoing committees and teams.
- Professional Development: improve professional skills and develop connections with industry peers.
- Information Policy Maintenance: write or assist with policy creation, assist with policy maintenance to adjust to new technologies and business process evolution.
Security Operations Center
- Enterprise Authentication: maintain products that enable only authorized individuals to access corporate assets, such as virtual private networking (VPN) access; Determine the most secure methods of allowing access to County resources while protecting existing processes and data and minimizing disruptions to the production network.
- Internal Security: maintain products that protect assets within the corporate network and that identify vulnerabilities of County systems, and products that sense abnormal or malicious traffic on the network. (Intrusion detection systems, vulnerability scanners, antivirus); Determine best methods of scanning systems and analyzing discoveries to minimize false alerts.
- Content Filtering: maintain products that prevent harmful or policy-restricted elements from passing into the corporate environment and that prevent access to harmful or restricted elements by users of the corporate network. (anti-virus, web content filtering, anti-spam); Determine the best and most appropriate methods of tuning content filtering products.
- Perimeter Security: assist with maintaining firewalls and application/encryption security products that protect the corporate network and auditing rulesets applicable to security devices. (Palo Alto Firewalls, Barracuda WAFs)
- Investigations and Research: collect and preserve evidence of possible policy violations. Presentation of this evidence in a written and oral manner to managers and human resources, and explanation of the findings.
- Incident Response: detect and contain incidents; coordinate technical personnel's appropriate responses to instances of attack or virus outbreak; and document incidents for post-mortem.
- System/Project Review: analyze new and existing projects and systems for security weaknesses or policy violations, representing security positions and concerns on systems and projects.
- Security Awareness: train County employees and contractors on best practices and corporate policies, write and design appropriate training materials, initiating and coordinate distribution of materials and presentations.
- System Risk Identification/Management/Notification: perform risk assessments of systems and evaluate emergent threats, coordinate a response to assessments and threats, and notify appropriate personnel regarding discovered vulnerabilities.
- On-call after-hours and weekend support is required
MINIMUM QUALIFICATIONS
Experience: Minimum of three years of progressively responsible technical systems experience in cybersecurity or Information technology with a strong emphasis on security-related functions.
Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or closely related field
Combination of relevant education and relevant experience accepted? Yes
PREFERRED QUALIFICATIONS
Industry certifications related to Information Technology or cybersecurity
REASONABLE ACCOMMODATIONS STATEMENT
To accomplish this job, an individual must be able to perform, with or without reasonable accommodation, each essential function satisfactorily. Reasonable accommodations may be made to help enable qualified individuals with disabilities to perform the essential functions.
DISCLAIMER STATEMENT
This is not intended to be an all-inclusive list of job-related responsibilities, duties, skills, requirements, or working conditions. Other duties may be assigned based on business needs and the supervisor’s request. Mecklenburg County reserves the right to revise the job description at any time. Designated positions may be required to assist in emergency and/or disaster situations
About Mecklenburg County:
Mecklenburg County provides an environment where you can touch and enrich lives everyday in countless ways. From helping families in need to protecting the public’s health and even maintaining hundreds of acres of public park land, working here means you will have the chance to be a part of providing services for an amazingly diverse population. It’s not just a place to work – for some, its an opportunity to serve their neighbors and make a difference in our community. For others, the role they take on fulfills a lifelong pursuit in an area of study. Whatever the reason you choose to work for the County, there is an opportunity for personal growth, professional development, and to truly make a difference in people’s lives.
www.colinoncars.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, www.colinoncars.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, www.colinoncars.com is the ideal place to find your next job.