*** no c2c * *** W2 only; In person interview***Onsite***
Job Description:Scope of the project
Enhance the security posture of the client to protect sensitive citizen data and ensure the integrity of motor vehicle licensing and titling systems.
Daily Duties / Responsibilities
The DMV Security Team is looking for candidates to fill an entry level security position. The DMV will train the selected candidate to perform the tasks listed below. At a minimum we are looking for basic server or network administration skills that we can build upon.
Threat Intelligence Research
- Monitor and analyze threat intelligence feeds to identify emerging threats relevant to the organization.
- Document findings, such as new attack methods or vulnerabilities, and share with the team.
- Use open-source intelligence (OSINT) tools to gather data on potential risks and adversaries.
Threat Hunting and Detection Rule Creation
- Conduct proactive searches for suspicious behavior in network and endpoint activity using provided tools and playbooks.
- Utilize threat feeds, investigate suspicious activity, and stay current on cyber threats.
- Collaborate with senior analysts to refine and test detection rules (e.g., SIEM queries or Defender for Endpoint rules).
- Document hunting methodologies and findings to support continuous improvement.
Log Analysis
- Review and interpret logs from firewalls, endpoints, and servers to identify indicators of compromise (IOCs).
- Escalate findings, such as anomalous IP addresses or unauthorized access attempts, to senior analysts.
- Maintain a log of recurring patterns or anomalies for long-term tracking and analysis.
Incident Response
- Assist in initial triage of security incidents by following response frameworks (e.g., NIST, MITRE ATT&CK).
- Identify and escalate potential security threats.
- Gather and analyze relevant evidence, such as logs or alert data, to determine the scope and severity of incidents.
- Document findings during incidents and contribute to containment and remediation efforts.
Documentation, Reporting, and Communication
- Create clear, detailed reports, including incident reports, after-action reviews, and process documentation.
- Deliver reports on the security posture and propose mitigation strategies.
- Draft training materials or guides to help improve organizational awareness and readiness.
- Regularly update and organize documentation to ensure accuracy and accessibility for team use.
Vulnerability Management
- Analyze reports, prioritize patching, and understand NIST best practices.
Security Awareness Training
- Develop and deliver training and assess employee awareness through simulations.
Security Automation and Scripting
- Leverage SCCM, GPO, and PowerShell for patch deployment.
- Automate tasks beyond SCCM, GPO, and PowerShell to increase efficiency.
Endpoint and Network Security
- Configure policies, analyze alerts, and manage endpoint protection.
- Understand network protocols and firewalls to strengthen the overall security posture.
Digital Forensics and Cloud Security
- Investigate security incidents and collect evidence for deeper analysis.
- Develop knowledge of cloud-specific security solutions as cloud adoption grows.
Required Skills (rank in order of Importance)
- Understanding of security concepts and processes
- Understanding of basic computer and network concepts
Preferred Skills (rank in order of Importance)
- 1+ Years of Experience in Server or Network Administration
- 1+ Year of Experience in an IT Security Focused Role
- Experience with SIEM and Endpoint Security Tools
- Experience with PowerShell, Group Policy, and Endpoint Management
- Knowledge of Vulnerability Management and Cloud Security
- Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related field
Additional Skills
- Problem-Solving: Analyze data, identify anomalies, and recommend solutions.
- Attention to Detail: Ensure accurate analysis and configuration for effective security measures.
- Ability to communicate and work effectively with a mid-size team
Required Education and Experience
- A High School Diploma is required at minimum
Certifications
Not required, however we prioritize applicants who have:
- GIAC Security Essentials (GSEC)
- Security+ (CompTIA)
- Network+ (CompTIA)
- GIAC Incident Handler (GCIH)
Never miss an opportunity! Create an alert based on the job you applied for.