Information Systems Security Specialist

DC STAR SOLUTIONS INC.

Tallahassee, FL Job Details Contract $70 - $75 an hour 5 hours ago Benefits Flexible schedule Qualifications Authentication Cloud identity and access management (IAM) Threat hunting activities Incident management Procedural guides Technical documentation Incident report management Triage Reporting (security system operation) Microsoft Exchange Tanium Endpoint Detection and Response (EDR) Security data analysis Email configuration (technical support) Incident management operations support Security threat response protocols MFA Cybersecurity investigations Threat intelligence Data collection Root cause analysis Cybersecurity Network incident reporting Cloud monitoring Security processes improvement Incident response implementation Security technology solutions implementations PowerShell Network event correlation Cloud services

Full Job Description Primary Work:

This position is responsible for providing hands-on enterprise security engineering, security operations, email security administration, threat response, and threat-hunting support. The Contractor will provide one experienced Systems Security Specialist who will serve as a primary hands on administrator for assigned security technologies and will independently perform the configuration, administration, tuning, troubleshooting, investigation, documentation, and response activities.

Required Tasks to be performed:

Seven years of progressively responsible information technology and cybersecurity experience in enterprise environments, including security engineering, security operations, endpoint security, identity security, cloud security, and messaging security. Four years of recent hands-on production experience configuring, administering, tuning, investigating and troubleshooting Palo Alto Cortex and Tanium security technologies, including Palo Alto Cortex for Endpoint and Tanium Comply Modules. Three years of recent hands-on production experience administering enterprise email security technologies. The proposed consultant must demonstrate hands-on production administration experience with Proofpoint, Tessian, and Abnormal Security. The required three years may consist of combined experience across these technologies, but experience with each named technology is mandatory. Three years of recent hands-on Microsoft Exchange Administrator experience, including Exchange Online administration, mail flow, transport rules, connectors, message tracing, anti-spam controls, anti-phishing controls, quarantine, mail routing, and troubleshooting security-related messaging issues. Three years of hands-on security incident-response experience, including alert triage, investigation, containment, eradication, recovery, root-cause analysis, and post-incident documentation. Two years of hands-on threat-hunting experience using endpoint, identity, email, network, and cloud telemetry to identify malicious or anomalous activity not detected through standard alerting. Demonstrated experience developing and tuning detection logic, security policies, alert thresholds, exclusions, allow and block rules, indicators, automated response actions, and other controls to improve detection efficacy and reduce false positives. Demonstrated ability to investigate endpoint, identity, and email threats using artifacts such as process trees, command lines, hashes, URLs, domains, IP addresses, message headers, authentication events, user activity, and related telemetry. Demonstrated experience with Microsoft Entra ID or Azure Active Directory security, including authentication events, sign-in risk, conditional access, identity protection, multifactor authentication, and identity-related incident investigation. Demonstrated experience using PowerShell or comparable scripting to support security administration, investigation, data collection, configuration, and repeatable operational tasks. Demonstrated experience creating and maintaining technical configurations, operational procedures, incident records, threat-hunting reports, security metrics, and remediation recommendations suitable for operational and management review. Demonstrated experience performing substantially similar services in at least one large, distributed enterprise environment. The proposed consultant must be capable of independently performing the services described in this scope of work upon assignment. Independent performance means the ability to execute routine administration, investigation, troubleshooting, configuration, threat hunting, and incident-response activities without requiring Department staff or other contractors to provide basic product instruction, repeated procedural instruction, or continuous technical oversight. Environment-specific orientation, access provisioning, architecture familiarization, Department approval requirements, and Department-specific procedures are not considered foundational technical training.

Job Type:

Contract Pay:

$70.00 - $75.00 per hour

Benefits:

Flexible schedule

Experience:

Cybersecurity:

7 years (Preferred)

Work Location:

In person