REQUIRED EDUCATION

• A High School Diploma is required at minimum

PREFERRED EDUCATION

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related field

PREFERRED CERTIFICATIONS

• GIAC Security Essentials (GSEC)
• Security+ (CompTIA)
• Network+ (CompTIA)
• GIAC Incident Handler (GCIH)REQUIRED

SKILLS/ EXPERIENCE

• Understanding of security concepts and processes
• Understanding of basic computer and network concepts

ADDITIONAL SKILLS

• Problem-Solving:

  Analyze data, identify anomalies, and recommend solutions
• Attention to

Detail:

Ensure accurate analysis and configuration for effective security measures

• Ability to communicate and work effectively with a mid-size team

PREFERRED SKILLS

• 1+ Years of Experience in Server or Network Administration
• 1+ Year of Experience in an IT Security Focused Role
• Experience with SIEM and Endpoint Security Tools
• Experience with PowerShell, Group Policy, and Endpoint Management
• Knowledge of Vulnerability Management and Cloud Security

SCOPE OF THE ROLE

Enhance the security posture of the client to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems. The Security Team is looking for candidates to fill an entry level security position. The client will train the selected candidate to perform the tasks listed below. At a minimum We are looking for basic server or network administration skills that we can build upon.

DAILY DUTIES / RESPONSIBILITIES

1.Threat Intelligence ResearchoMonitor and analyze threat intelligence feeds to identify emerging threats relevant to the organizationoDocument findings, such as new attack methods or vulnerabilities, and share with the teamoUse open-source intelligence (OSINT) tools to gather data on potential risks and adversaries2.Threat Hunting and Detection Rule CreationoConduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooksoUtilize threat feeds, investigate suspicious activity, and stay current on cyber threats.oCollaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules)oDocument hunting methodologies and findings to support continuous improvement3.Log AnalysisoReview and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs)oEscalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analystsoMaintain a log of recurring patterns or anomalies for long-term tracking and analysis4.Incident ResponseoAssist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK)oIdentify and escalate potential security threatsoGather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidentsoDocument findings during incidents and contribute to containment and remediation efforts5.Documentation, Reporting, and CommunicationoCreate clear, detailed reports, including incident reports, after-action reviews, and process documentationoDeliver reports on the security posture and propose mitigation strategiesoDraft training materials or guides to help improve organizational awareness and readinessoRegularly update and organize documentation to ensure accuracy and accessibility for team use6.Vulnerability ManagementoAnalyze reports, prioritize patching, and understand NIST best practices7.Security Awareness TrainingoDevelop and deliver training and assess employee awareness through simulations8.Security Automation and ScriptingoLeverage SCCM, GPO, and PowerShell for patch deploymentoAutomate tasks beyond SCCM, GPO, and PowerShell to increase efficiency9.Endpoint and Network SecurityoConfigure policies, analyze alerts, and manage endpoint protectionoUnderstand network protocols and firewalls to strengthen the overall security posture10.Digital Forensics and Cloud SecurityoInvestigate security incidents and collect evidence for deeper analysisoDevelop knowledge of cloud-specific security solutions as cloud adoption grows

• Only those lawfully authorized to work in the designated country associated with the position will be considered.
• Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client's business needs and requirements.

•