MS Dept of Human Services
Bachelors
In-Person
Onsite required. Do not submit remote candidates, MDHS will reject the candidate if they interview and mention remote.
This position will be accountable for performing a wide range of complex security procedures and processes necessary to ensure the safety of information systems and assets and protect systems and data from intentional or inadvertent access or destruction. Ensures that users understand and adhere to the necessary procedures and processes to maintain security. Conducts complex IT data and security forensic investigations. Conducts internal vulnerability management to meet regulatory and standards compliance. Requires knowledge of domain structures, user authentication and digital signatures. Requires in-depth knowledge of intrusion detection and internet architecture. Implements and administers Cybersecurity related systems.
Provide the minimum required skills and/or experience the contractor must possess to qualify for this position. These requirements will be transferred to the Score Sheet and candidates without these requirements reflected on their resume will NOT be presented to the manager for consideration. 5+ years of Cybersecurity related experience. Tenable/Nessus or other vulnerability scanning experience. Endpoint protection, AV/XDR, AV/XDR policy config, endpoint agents. SIEM, logging/syslog, Alerting. Windows/Linux Server administration of on-premise Cybersecurity applications. Experience with cybersecurity tools used for routine security related tasks. Example: Nmap, Wireshark, phishing sim. Experience participating in situational tabletop exercises (malware, phishing, ransomware).
Experience with vulnerability scanning, identification and remediation, penetration testing, endpoint protection/hardening, CIS benchmarks, NIST/Cybersecurity frameworks, MITRE Telecommunication&CK Matrix, IRS 1075, SSA, PII, threat vectors, threat hunting, incident response and remediation. Experience with common IT infrastructure found in most large organizations including but not limited to load balancers, network LAN/WAN, firewall, email, AV, SIEM, GPO, web proxy, web, application development processes, database, Windows/Linux server, Windows workstation, wireless, 365 ATP/DLP. Strong written and verbal communication. Office (Word Excel Outlook One-Drive SharePoint).