Novalink Solutions logo

Security Architect - Consultant

Novalink Solutions
  • West Columbia, South Carolina
    3 days ago

    Job Description

    This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced consultants, and we are seeking individuals who are highly productive, very flexible, and can work in an environment where fluidity of duties is common. Each team member is expected to contribute with minimal supervision.

    Candidates who enjoy working on complex, change-oriented projects with motivated team members will find this position attractive.
    The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. This position requires a broad and keen understanding of technology and IT delivery of Security Operation services for on premise and cloud based equipment and critical applications. A strong candidate for this position should possess experience in the following:
    • Cyber Threat Response and Incident Handling
    • Cyber Security Operations
    • Security Service Portfolio Management
    DAILY DUTIES / RESPONSIBILITIES:

    The Cybersecurity Operations Lead will be in a unique position to help mature our Security Operations Center capability and will work directly for the CISO to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.

    Essential Responsibilities
    1. Drive innovation and maturation of Security Operations capabilities
    2. Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analyst I, II, and III
    3. Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution
    4. Lead and mentor a team of Security Operations analysts, ensuring they are well-trained and motivated
    5. Assist in staffing Security Operations staff
    6. Perform threat identification and analysis of risks to the Medicaid Enterprise
    7. Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures
    8. Consistently review and refine Playbooks, Process, and Alert reviews to identify areas of improvement
    9. Assist with advanced threat hunting, looking for attacker presence within the environment
    10. Work with Information Technology, Application Development and Business Teams to advance security efforts of the Medicaid Enterprise
    11. Lead security team projects, and continuous improvement
    12. Collaborate with compliance teams to maintain audit-ready status
    REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
    1. 10+ years of experience of IT working with Windows, Linux, and Web-based applications
    2. 5+ years of experience with enterprise infrastructure design and deployment
    3. 5 years of related experience in a SOC lead capacity
    PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
    1. Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.
    2. Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements
    3. Prior experience in working with eGRC systems
    REQUIRED EDUCATION/CERTIFICATIONS:
    ANY ONE OR COMBINATION OF:
    • CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP)
    • GIAC CERTIFIED INCIDENT HANDLER (GCIH)
    • SECURITY + PREFERRED EDUCATION/CERTIFICATIONS:
    • BS degree in computer science, information technology, engineering or similar discipline
    • Cloud certification (i.e. CASP +)
    • Network security certifications

    ADDITIONAL SKILLS & DUTIES:
    1. Ability to communicate clearly, verbally and in writing; to interact effectively with internal and external vendors, project team members, management and agency departments; to build relationships and use facilitation skills with both technical and non-technical personnel
    2. Experience in organizing information in a way that is appropriate for technical explanations without losing sight of the needs and aptitude of the audience
    3. Ability to work independently and collaborate with multiple teams and vendors
    4. Ability to multitask and prioritize tasks effectively in order to meet deadlines
    5. Must be intermediate to advanced skills in additional Microsoft Office products (Word, Excel, PowerPoint, Visio) and working with templates and style guidelines for branding consistency
    6. Keen attention to detail while maintaining the ability to see the big picture
    7. Experience with the evaluation and selection of products and vendors to support initiatives.
    8. Ability to accept changes and constructive criticism in a fast turn-around environment
    9. A firm understanding of the offerings and capabilities within Cloud service providers and technologies


    This is an ongoing project with aggressive timelines. A majority of the team is made up
    of experienced consultants, and we are seeking individuals who are highly productive,
    very flexible, and can work in an environment where fluidity of duties is common. Each
    team member is expected to contribute with minimal supervision.
    Candidates who enjoy working on complex, change-oriented projects with motivated
    team members will find this position attractive.
    WHY IS THIS POSITION OPEN (new role, increased work load, new dept, resignation, promotion)?
    If backfill Position – What separated the candidate you initially selected from all the other
    resumes presented?
    36 Month Renewal: This position is needed to provide direct support to the Office of
    Cybersecurity to meet Agency, State and Federal security & privacy goals and
    compliance requirements.
    SCOPE OF THE PROJECT:
    The Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity
    threat monitoring and incident response capabilities. This position requires a broad and
    keen understanding of technology and IT delivery of Security Operation services for on
    premise and cloud based equipment and critical applications. A strong candidate for this
    position should possess experience in the following:
    • Cyber Threat Response and Incident Handling
    • Cyber Security Operations
    • Security Service Portfolio Management
    (CYBER OPERATIONS AND THREAT MANAGEMENT LEAD)
    DAILY DUTIES / RESPONSIBILITIES:
    The Cybersecurity Operations Lead will be in a unique position to help mature our
    Security Operations Center capability and will work directly for the CISO to drive
    innovation and maturation of the Agency Cyber threat detection and response
    capabilities. We are looking for candidates who are highly organized, can work
    independently in a fast-paced environment and produce multiple quality deliverables
    within defined deadlines. Candidates should be self-starters, creative problem solvers and
    have an eagerness to implement tactics, techniques and procedures which make the most
    effective use of Agency staff, resources, products and technologies quickly.
    Essential Responsibilities
    1. Drive innovation and maturation of Security Operations capabilities
    2. Act as an escalation point and provide leadership, mentorship, and guidance to
    SOC Analyst I, II, and III
    3. Oversee the identification, analysis, and response to security incidents, ensuring
    rapid containment and resolution
    4. Lead and mentor a team of Security Operations analysts, ensuring they are well-
    trained and motivated
    5. Assist in staffing Security Operations staff
    6. Perform threat identification and analysis of risks to the Medicaid Enterprise
    7. Assist in the implementation and advancement of Continuous Monitoring and
    Incident Response processes and procedures
    8. Consistently review and refine Playbooks, Process, and Alert reviews to identify
    areas of improvement
    9. Assist with advanced threat hunting, looking for attacker presence within the
    environment
    10. Work with Information Technology, Application Development and Business
    Teams to advance security efforts of the Medicaid Enterprise
    11. Lead security team projects, and continuous improvement
    12. Collaborate with compliance teams to maintain audit-ready status
    REQUIRED SKILLS (RANK IN ORDER OF
    IMPORTANCE):
    1. 10+ years of experience of IT
    working with Windows, Linux, and
    Web-based applications
    2. 5+ years of experience with
    enterprise infrastructure design and
    deployment
    3. 5 years of related experience in a
    SOC lead capacity
    PREFERRED SKILLS (RANK IN ORDER OF
    IMPORTANCE):
    1. Experience identifying, testing and
    leading remediation efforts of
    OWASP Top Ten, CWE/SANS
    TOP 25 Most Dangerous Software
    Errors, etc.
    2. Prior experience performing
    penetration testing and vulnerability
    assessments in organizations
    subject to FISMA or similar
    requirements
    3. Prior experience in working with
    eGRC systems
    REQUIRED EDUCATION/CERTIFICATIONS:
    ANY ONE OR COMBINATION OF:
    • CERTIFIED INFORMATION SYSTEMS
    SECURITY PROFESSIONAL (CISSP)
    • GIAC CERTIFIED INCIDENT HANDLER
    (GCIH)
    • SECURITY +
    PREFERRED EDUCATION/CERTIFICATIONS:
    • BS degree in computer science,
    information technology,
    engineering or similar discipline
    • Cloud certification (i.e. CASP +)
    • Network security certifications
    INTERVIEW PROCESS (phone, video or in-
    person, how many rounds of i/v’s, etc)?
    In-Person, Video
    ADDITIONAL SKILLS & DUTIES:
    1. Ability to communicate clearly,
    verbally and in writing; to interact
    effectively with internal and
    external vendors, project team
    members, management and agency
    departments; to build relationships
    and use facilitation skills with both
    technical and non-technical
    personnel
    2. Experience in organizing
    information in a way that is
    appropriate for technical
    explanations without losing sight of
    the needs and aptitude of the
    audience
    3. Ability to work independently and
    collaborate with multiple teams and
    vendors
    4. Ability to multitask and prioritize
    tasks effectively in order to meet
    deadlines
    5. Must be intermediate to advanced
    skills in additional Microsoft Office
    products (Word, Excel, PowerPoint,
    Visio) and working with templates
    and style guidelines for branding
    consistency

    Keen attention to detail while
    maintaining the ability to see the
    big picture
    7. Experience with the evaluation and
    selection of products and vendors to
    support initiatives.
    8. Ability to accept changes and
    constructive criticism in a fast turn-
    around environment
    9. A firm understanding of the
    offerings and capabilities within
    Cloud service providers and
    technologies





    Requirements

    Required Skills

    Skill Type
    Skill Name
    Any one of the following certifications: • CERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP), GIAC CERTIFIED INCIDENT HANDLER (GCIH), or SECURITY +
    10+ years of experience of IT working with Windows, Linux, and Web-based applications
    5+ years of experience with enterprise infrastructure design and deployment
    5 years of related experience in a SOC lead capacity

    Preferred Skills

    Skill Type
    Skill Name
    BS degree in computer science, information technology, engineering or similar discipline
    Cloud certification (i.e. CASP +)
    Network security certifications
    Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.
    Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements
    Prior experience in working with eGRC systems



    Numbers & Facts

    LocationWest Columbia, South Carolina
    IndustryStaffing/Employment Agencies
    Company Size20 to 49 employees
    Year Founded2004
    Websitehttp://www.novalink-solutions.com/

    About Company

    Novalink, founded in 2003 , is a leading consulting and staffing company serving clients in public and private sectors in Information Technology, Telecommunications (IT/Telecom), Technical Networks, Finance, and Administration. With government agencies as our primary clientele, our team has a proven track record of success in providing temporary personnel solutions and managing government deliverables-based projects over the past 20 years.

    Skills

    • Analysis Skillsunmatched
    • Brand Marketing (Branding)unmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • Cloud Computingunmatched
    • Communication Skillsunmatched
    • CompTIA Security+unmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Continuous Improvementunmatched
    • Detail Orientedunmatched
    • Establish Prioritiesunmatched
    • FISMA - Federal Information Security Management Actunmatched
    • GCIH - GIAC Certified Incident Handlerunmatched
    • Huntingunmatched
    • Incident Responseunmatched
    • Information Technology & Information Systemsunmatched
    • Internet Applicationunmatched
    • Internet Securityunmatched
    • Investment Managementunmatched
    • Leadershipunmatched
    • Linux Operating Systemunmatched
    • Medicaidunmatched
    • Mentoringunmatched
    • Microsoft Excelunmatched
    • Microsoft PowerPointunmatched
    • Microsoft Visiounmatched
    • Microsoft Windows Operating Systemunmatched
    • Microsoft Wordunmatched
    • Multitaskingunmatched
    • Network Securityunmatched
    • Operational Auditunmatched
    • Operations Managementunmatched
    • Organizational Skillsunmatched
    • Penetration Testingunmatched
    • Privacy Controlsunmatched
    • Problem Solving Skillsunmatched
    • Project Estimatesunmatched
    • Protective Servicesunmatched
    • Risk Analysisunmatched
    • Security Analysisunmatched
    • Security Architectureunmatched
    • Security Attacksunmatched
    • Security Consultingunmatched
    • Service Deliveryunmatched
    • Software Developmentunmatched
    • Style Guideunmatched
    • Team Lead/Managerunmatched
    • Technical Deliveryunmatched
    • Testingunmatched
    • Threat and risk analysis (TRA)unmatched
    • Time Managementunmatched

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Resume Builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Resume Builder