What are the responsibilities and job description for the Information Technology Specialist 4 (Information Security) position at Homeland Security and Emergency Services, Division...?
The minimum qualifications required for this vacancy. Minimum Qualifications Non-competitive: Bachelor’s degree* with at least 15 credit hours in cyber security, information assurance, or information technology; and three years of information technology experience, including two years of information security or information assurance experience**. *Substitution: bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year-for-year basis; an associate's degree requires an additional two years of general information technology experience. **Experience solely in information security or information assurance may substitute for the general information technology experience.Desired Certifications: • Offensive Security’s OSCP, OSEP• SANS GPEN, GXPN, GCIH, GWAPT
The duties that the incumbent of the vacancy will be expected to perform. Duties Description The incumbent will report to the Office of Counter Terrorism's (OCT) Cyber Incident Response Team (CIRT). Duties include but are not limited to: • Participate in remote and on-site penetration testing, vulnerability scanning, and report writing for the DHSES Pentest Program.• Conduct remote and on-site customer cyber security risk assessments against the CIS Critical Security Controls, network scans, and cyber threat and vulnerability analysis• Utilize existing, approved tools to perform network penetration tests and risk assessments for external entities.• Develop custom tools as needed to improve the DHSES Cyber Programs.• Effectively communicate findings and technical details to varied audiences (e.g., IT workers, leadership) within an organization.• Participate in drafting of reports and ensure reports are both technically accurate and well-written.• Mentor and cross train staff from other CIRT program areas interested in offensive security.• Oversee the development and dissemination of actionable strategic, technical, and tactical cyber information and intelligence to non-Executive agencies, local governments, and public authorities through reports, briefings, and presentations.• Collect, analyze, and report on technical cyber security issues and emerging trends impacting state and local agencies.• Lead and facilitate stakeholders’ participation in technical cyber security meetings, presentations, trainings, seminars, etc., to foster information-sharing and enhance awareness.• Oversee and conduct technical outreach to non-Executive agencies, local governments, and public authorities to discuss cyber security policies, programs, and infrastructure.• Monitor information security trends, tools, and techniques to maintain awareness and evaluate the applicability of the latest information security techniques and tools to agencies’ security programs.• Liaise with cyber security industry experts to maintain knowledge of cyber trends and techniques.• Assist in disaster response and recovery activities as required and assigned. • The appointed candidate will be required to obtain one of the following certifications during their probationary period (if not already held): GPEN, GXPN, OSCP, OSEP, or equivalent.? Failure to obtain this level of certification will result in termination.? Additional details about the required certifications will be discussed during the job interview.
Additional comments regarding the vacancy. Additional Comments Travel may be required, including during evening and weekends, depending on mission and assignment. Possession and maintenance of a valid Driver’s License issued by the NYS Department of Motor Vehicle is required, or otherwise demonstrate the capacity to meet the transportation needs of the job. NOTE: Support of operations during times of emergency and disaster from State Emergency Operations Center (EOC), state field offices and/or local deployments may be required, which would result in a change and/or increase in working hours, locations and/or duties.NOTE ON TELECOMMUTING: Employees are required to apply and obtain approval through management to telecommute according to the agency’s Telecommuting Program Guidelines.
Some positions may require additional credentials or a background check to verify your identity.
The duties that the incumbent of the vacancy will be expected to perform. Duties Description The incumbent will report to the Office of Counter Terrorism's (OCT) Cyber Incident Response Team (CIRT). Duties include but are not limited to: • Participate in remote and on-site penetration testing, vulnerability scanning, and report writing for the DHSES Pentest Program.• Conduct remote and on-site customer cyber security risk assessments against the CIS Critical Security Controls, network scans, and cyber threat and vulnerability analysis• Utilize existing, approved tools to perform network penetration tests and risk assessments for external entities.• Develop custom tools as needed to improve the DHSES Cyber Programs.• Effectively communicate findings and technical details to varied audiences (e.g., IT workers, leadership) within an organization.• Participate in drafting of reports and ensure reports are both technically accurate and well-written.• Mentor and cross train staff from other CIRT program areas interested in offensive security.• Oversee the development and dissemination of actionable strategic, technical, and tactical cyber information and intelligence to non-Executive agencies, local governments, and public authorities through reports, briefings, and presentations.• Collect, analyze, and report on technical cyber security issues and emerging trends impacting state and local agencies.• Lead and facilitate stakeholders’ participation in technical cyber security meetings, presentations, trainings, seminars, etc., to foster information-sharing and enhance awareness.• Oversee and conduct technical outreach to non-Executive agencies, local governments, and public authorities to discuss cyber security policies, programs, and infrastructure.• Monitor information security trends, tools, and techniques to maintain awareness and evaluate the applicability of the latest information security techniques and tools to agencies’ security programs.• Liaise with cyber security industry experts to maintain knowledge of cyber trends and techniques.• Assist in disaster response and recovery activities as required and assigned. • The appointed candidate will be required to obtain one of the following certifications during their probationary period (if not already held): GPEN, GXPN, OSCP, OSEP, or equivalent.? Failure to obtain this level of certification will result in termination.? Additional details about the required certifications will be discussed during the job interview.
Additional comments regarding the vacancy. Additional Comments Travel may be required, including during evening and weekends, depending on mission and assignment. Possession and maintenance of a valid Driver’s License issued by the NYS Department of Motor Vehicle is required, or otherwise demonstrate the capacity to meet the transportation needs of the job. NOTE: Support of operations during times of emergency and disaster from State Emergency Operations Center (EOC), state field offices and/or local deployments may be required, which would result in a change and/or increase in working hours, locations and/or duties.NOTE ON TELECOMMUTING: Employees are required to apply and obtain approval through management to telecommute according to the agency’s Telecommuting Program Guidelines.
Some positions may require additional credentials or a background check to verify your identity.
