Cybersecurity Tools Lead

Texas GovLink, Inc. is an Austin-based firm which has been a leading provider of technical and business professionals to clients in Texas. We are currently seeking an experienced Security Operations Manager to be a key resource on a technical services team for our client, the Texas Department of Transportation (TxDOT).

Work hours and Location

• 8:00AM-5:00PM CST Monday through Friday

Job Location: 6230 E Stassney Ln, Austin, TX 78744

Onsite.

Responsibilities

Work involves assisting in supervision and service delivery control of the TxDOT Cybersecurity Operations tools team comprising of seven (8) staff augmentation contractors. Employee will ensure real-time data, metrics, and correlated incident input to the CSOC Incident Response Team. Works under minimal supervision, with extensive latitude for the use of initiative and independent judgment.

DUTIES

Employee will assist in supervising and managing the TxDOT Cybersecurity Operations Tools Team; will work under the management of the TXDOT Cybersecurity Officer; will be responsible for administration, maintenance, and resilience of Cybersecurity tools; real-time data, metrics, and correlated incident input to the CSOC Manager for use in daily monitoring and incident response; and support of daily operations and incident response activities. Employee will provide tooling input for end of month and annual reporting requirements as dictated by TxDOT. As appropriate, Employee will provide recommendations for improvements in daily operations, resilience, and Cybersecurity operational maturity. Employee will be responsible for planning and management of tooling deployment and operating\managing the security tool sets. Employee will be responsible for assisting in managing ongoing agency cybersecurity programs (e.g. Tabletop exercises).

Team members will provide services in the following areas:

• Custom Managed Scanning Services
• Custom Managed Endpoint Protection
• Managed CISCO Secure Network Analytics Service
• Security Information and Event Management (SIEM) administration

Qualifications

Minimum (Required):

8 years of:

• Technical Team Management experience
• Deployment and configuration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, Netflow, etc)
• Administration of Network Security monitoring and incident response tools (EDR, Scanners, SIEM, Netflow, etc)
• Participation and experience in intrusion detection and incident response activities
• Effective, professional business communication and reporting

Preferred (Optional):

8 years of:

• Experience with the CISCO security suite of tools
• Experience with Microsoft EDR tools
• Experience with Microsoft Sentinel
• Experience with the Tenable suite of tools

Overview

Allied Consultants offers its family of consultants excellent rates, a local support staff, and an attractive benefits package which includes medical insurance (Allied shares a percentage of the cost), life insurance, a matching 401(k) plan and a cafeteria plan. Candidates selected for interview will be required to undergo criminal background checks and may be required to complete a drug screen in accordance with Federal and State Law. Offers of Employment are contingent on a successful background check. Allied Consultants is an equal opportunities employer.