What are the responsibilities and job description for the SCC - Lead Cybersecurity Engineer position at Cyber Resource Provider LLC?
Job Details
Engagement Type
Contract
Short Description
SCC - Lead Cybersecurity Engineer to help the CIO plan and implement key initiatives.
Number of days required on-site: 2 days: Tuesday and Wednesday REQUIRED each week (with rest of the team)
Complete Description
Number of days required on-site: 2 days: Tuesday and Wednesday REQUIRED each week (with rest of the team). Parking is NOT provided for contractors.
Interviews: Mgr will do initial web based IV but reserves the option to do a follow up IN PERSON interview if they deem necessary.
ABOUT THE ROLE
Lead cybersecurity engineer to help the CIO plan and implement key initiatives as well as manage vulnerabilities and security operations and incidents across the IT team, including responding to threats, ensuring compliance and managing threats with ITD and IS professionals.
Overseeing the day-to-day management of security activities in partnership with IS and IT, including regular reporting to the CIO. This including daily monitoring of events, logs and/or anomalies with IS and IT staff. Help in managing future architecture designs of networks, applications and environments to ensure data captured in sufficient to help monitor security.
Security Operations Center (SOC) - Security monitoring tool and staff to manage it.
CISSP or CISM would be nice but not mandatory.
Required/Desired Skills
| Skill | Required/Desired | Amount | of Experience |
|---|---|---|---|
| Current exp as a Cyber Security Lead or Manager of projects | Required | 3 | Years |
| Analyzing data across an organization to be able to recreate incident or other events | Required | 7 | Years |
| Experience overseeing the daily workflow, schedules and assignments of security staff | Required | 5 | Years |
| Leadership: Uphold integrity, leadership and performance standards as a lead, supervisor or director | Required | 5 | Years |
| Experience overseeing security siem operations, including creating baselines | Required | 5 | Years |
| Experience correlating data to triggers to respond/investigate | Required | 7 | Years |
| Performs routine analysis of traffic, events and log review to ensure baseline is accurate as well identifying any anomalies. | Required | 7 | Years |
| Experience with using a SIEM (like Splunk or Trellix) | Required | 5 | Years |
| Experience managing an on-premise SOC (Security Operations Center) | Desired | 0 | |
| Experience with network and architecture design | Desired | 0 | |
| CISSP OR CISM preferred | Desired | 0 |
Questions
| Description | |
|---|---|
| Question 1 | Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment? |
| Question 2 | Please list candidate's email address. |
| Question 3 | In what city and state does your candidate currently reside? Local Richmond candidates preferred due to the on site requirement. |
| Question 4 | If you indicate that your candidate currently resides in Richmond and their phn# or entries (locations) on their resumes do not reflect they are in Richmond, then please upload either a copy of their driver's license or a recent utility bill at TIME OF SUBMITTAL to confirm their name and local address. |
| Question 5 | Does your candidate have any of the DESIRED certs? If so which one (s)? |
| Question 6 | Does your candidate have the DESIRED experience managing an on-premise SOC (Security Operations Center)? If so please make sure its highlighted on their resume. |
| Question 7 | About Interviews: Mgr will do initial web based IV but reserves the option to do a follow up IN PERSON interview if they deem necessary. Does your candidate agree to this arrangement if selected for an interview? |
