Job Description:

• large, complex networked environments. 

• The resource requires specialized skill set to provide guidance at various stages of planning and implementing security design, processes and solutions, and pivot between numerous technical projects communicating status at various leadership levels. 

• The resource will have significant interaction with NYC Cyber Command leadership, its engineering and architecture teams, incident response and other cyber security practitioners. 

Responsibilities:

• Bachelor's degree in Computer Science, Information Systems or equivalent work experience 

• At least 12+ years of experience in information security 

• At least 8+ years in IT infrastructure management, application architecture, risk management, data architecture, middleware technology, and IT operations and project management 

• At least 8+ years of experience with networking, load-balancing, DNS, TLS/SSL digital certificates, SAML, Kerberos, MFA technologies, and Identity management 

• At least 4+ years of experience working in cloud environment (Azure, AWS, GCP) 

• At least 4+ years of experience working in securing Internet-facing applications, utilizing WAF technologies (eg: Akamai CDN and WAF, CloudFlare, Azure CDN and WAF, AWS CloudFront and WAF) 

• At least 4+ years of experience working tools and techniques for collecting and processing Network Security Telemetry and Security Event Data. 

• At least 4+ years of experience architecting, deploying, and managing endpoint security and EDR technology 

• At least 4+ years of experience using scripting languages (Python, Bash, Powershell, etc.) 

• At least 4+ years of experience with Windows, Linux, or MacOS administration 

• At least 4+ years of experience working with vulnerability management and scanning tools 

Requirements:

• Experience in implementing and operating Network Security Telemetry Collection Systems in multi-cloud and on-prem environments 

• Experience in implementing and operating Data Loss Prevention Systems 

• Experience of information security principles and practices, especially the implementation of practical technical controls to support organization policy 

• Strong understanding of networking protocols, firewalls, and cybersecurity protection concepts, including software development lifecycle, and compensating controls 

• Strong understanding of cloud-based services such as O365, AzureAD, IAM 

• Strong understanding of CIS controls