Key Responsibilities

Security Operations & Monitoring

• Monitor enterprise systems using CrowdStrike Falcon (EDR), Splunk (SIEM), and Tenable (Vulnerability Management).
• Detect, investigate, and respond to threats, focusing on Controlled Unclassified Information (CUI) protection.
• Maintain dashboards, alerts, and reports for proactive risk detection and escalation.

Vulnerability & Risk Management

• Conduct vulnerability assessments using Tenable tools and track remediation efforts.
• Support patch management and configuration management to minimize risks.
• Provide metrics and updates on risk posture to leadership.

Compliance & Documentation

• Maintain and update System Security Plans (SSPs) to reflect security control implementations.
• Support internal and external audits (IRS, CMS, SSA, NIST, FISMA) with required documentation and evidence.
• Ensure adherence to evolving compliance frameworks (e.g., NIST SP 800-53 Rev. 5).

Incident Response

• Triage and analyze security incidents across enterprise systems.
• Collaborate with IT and business stakeholders on containment, eradication, and recovery.
• Deliver incident reports, root cause analyses, and lessons learned documentation.

Security Awareness & Training

• Develop and deliver targeted security awareness programs.
• Provide specialized training for privileged users and administrators.
• Track and report on training participation and effectiveness.

Reporting & Communication

• Generate actionable insights through Splunk dashboards, Tenable reports, and CrowdStrike summaries.
• Provide executive-level updates on risks, compliance, and incident trends.
• Track remediation activities and ensure timely resolution.

Required Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, IT, or a related field (or equivalent experience).
• Hands-on experience with Splunk, CrowdStrike Falcon, and Tenable Nessus/Tenable.sc.
• Strong understanding of CUI protection requirements and compliance frameworks (NIST, FISMA, IRS Pub 1075, CMS, SSA).
• Experience in incident response, vulnerability management, and risk assessments.
• Excellent analytical, documentation, and communication skills.
• Preference will be given to candidates with State of Georgia experience.