Security Architect - Consultant

The Office of Cybersecurity is responsible for ongoing enterprise cybersecurity threat monitoring and incident response capabilities. The Security Architect will support the agency’s cybersecurity operations for on-premises and cloud-based equipment and critical applications. The Cybersecurity Operations Lead will work directly with the CISO to drive innovation and mature the Agency’s Security Operations Center (SOC), threat detection, and response capabilities., * Drive innovation and maturity of Security Operations capabilities.

• Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analysts I, II, and III.
• Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution.
• Lead and mentor Security Operations analysts, ensuring they are well-trained and motivated.
• Assist with staffing Security Operations personnel.
• Perform threat identification and analyze risks to the Medicaid Enterprise.
• Assist in implementing and advancing Continuous Monitoring and Incident Response processes and procedures.
• Review and refine playbooks, processes, and alerts to identify improvement opportunities.
• Assist with advanced threat hunting to identify attacker presence within the environment.
• Collaborate with IT, Application Development, and Business teams to advance Medicaid Enterprise security efforts.
• Lead security team projects and continuous improvement initiatives.
• Collaborate with compliance teams to maintain audit-ready status.

This role requires a highly productive, flexible, and independent professional who can work in a fast-paced environment, manage changing priorities, and deliver quality results with minimal supervision., * IT experience working with Windows, Linux, and Web-based applications

• Enterprise infrastructure design and deployment experience
• Related experience in a SOC Lead capacity
• One or a combination of the following certifications: CISSP, GCIH, or Security+

<>Preferred Skills

• Identifying, testing, and leading remediation efforts for OWASP Top Ten and CWE/SANS Top 25 vulnerabilities
• Penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements
• Experience working with eGRC systems
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a similar discipline
• Cloud certification (e.g., CASP+)
• Network security certifications, * Strong verbal and written communication skills, including interaction with vendors, project teams, management, and agency departments.
• Ability to explain technical information according to the audience’s needs and technical understanding.
• Ability to work independently and collaborate with multiple teams and vendors.
• Strong multitasking, prioritization, and deadline management skills.
• Intermediate to advanced skills in Microsoft Word, Excel, PowerPoint, and Visio.
• Attention to detail while maintaining a broader business perspective.
• Experience evaluating and selecting products and vendors.
• Ability to adapt to changes and constructive feedback in a fast-paced environment.
• Strong understanding of cloud service provider offerings and capabilities., * Must be available for a virtual interview.
• Must hold at least one of the required certifications: CISSP, GCIH, or Security+.