Assists in ensuring the security of the DHMS program's information systems, networks, and data through monitoring, detecting, investigating, analyzing, and responding to cybersecurity incidents and implementing protective measures. Works closely with IT, operations, compliance, and risk management teams to comply with DHMS IT cybersecurity requirements, policies, and best practices. Possesses fundamental understanding of cybersecurity principles and training or experience in security tools (e.g., firewalls, IDS/IPS), conducting security assessments, developing and implementing mitigation strategies, and incident response. Capable of developing documentation and knowledge of data security best practices. Must have good problem-solving, analytical, communication, and interpersonal skills and the ability to manage multiple tasks effectively. Demonstrates attention to detail, organizational skills, and ability to work independently and as part of a team.
Duties:
Monitor, detect, investigate, analyze, and respond to cybersecurity incidents affecting DHMS program information systems, networks, and dataImplement protective measures and mitigation strategiesCollaborate with IT, operations, compliance, and risk management teams to ensure compliance with DHMS IT cybersecurity requirements, policies, and best practicesConduct security assessments using tools such as firewalls and IDS/IPSDevelop documentation supporting data security best practicesSupport application and server security activities, including identifying and mitigating web application vulnerabilities (e.g., OWASP Top 10), encryption/hashing practices, and static code analysisApply knowledge of identity/access management (SSO, RBAC) and secure operating environment practices (Unix/Linux) as applicable to DHMS systemsRequired QualificationsAssociate's Degree 3-5 years of experience in cybersecurity/information security operationsFundamental understanding of cybersecurity principles and training/experience with security tools (firewalls, IDS/IPS) Experience conducting security assessments and implementing mitigation strategiesStrong problem-solving, analytical, communication, and interpersonal skillsAbility to manage multiple tasks effectivelyAttention to detail, organizational skills, and ability to work independently and as part of a teamPreferred QualificationsFamiliarity with the DHMS program IT environment and cybersecurity requirementsExperience with incident response processes and documentation developmentKnowledge of web application security best practices (OWASP Top 10) and secure/static code analysisCompensation Ranges
Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
EEO Requirements
It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.
All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.
Physical Requirements:
The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.
Disclaimer:
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
$105,000–$116,000
EEO Requirements
It is the policy of ASM that an individual's race, color, religion, sex, disability, age, gender identity, veteran status, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.
All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, veteran status, disability, gender identity, or age. All decisions on employment are made to abide by the principle of equal employment.