IT Security Officer (ITSO)

IT Security Officer (ITSO) – In this role, you will have extensive experience working with various security products and tools, including Tenable, Splunk, Nessus, and related technologies. The ITSO L2 Engineer will be responsible for managing and monitoring cybersecurity incidents, conducting security assessments, and ensuring compliance with cybersecurity policies and procedures in Command Center.

You Will:

Cybersecurity Management:

• Track and manage cybersecurity incidents and key security threat events. Report findings to the Agency as required.
• Track and disseminate security advisories, including threat reports, security directives, and patch recommendations to the Agency.
• Conduct information security awareness training for staff.
• Assist in or conduct tabletop exercises and security risk management activities.

Security Product Management:

• Use Tenable and Nessus for vulnerability scanning and security assessments of applications, including client/server software and mobile apps, to be deployed in corporate networks.
• Utilize Splunk for security event monitoring and log analysis.
• Perform onboarding and vulnerability scanning of computing devices to ensure cyber hygiene before connecting to corporate networks.

Compliance and Reviews:

• Ensure adherence to the customer’s ICT and cybersecurity incident response plan through ongoing security reviews and audits.
• Conduct security assessments of customer ICT systems, including log analysis.

Network and Security Integration:

• Manage and configure security tools and platforms to ensure they are effectively integrated with the network infrastructure.
• Implement and maintain security policies and procedures to protect the organization’s IT assets.

Documentation and Reporting:

• Maintain detailed and accurate documentation of security incidents, assessments, and policies.
• Prepare and deliver reports on security performance, incidents, and compliance.
• Work closely with other IT teams and external vendors to support and implement security solutions.
• Collaborate with the Agency to ensure alignment with cybersecurity objectives and requirements.

You Bring:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in cybersecurity roles, including experience with security products like Tenable, Splunk, and Nessus.
• CISSP, CISM, CISA, or any other professional cybersecurity certification.
• Experience with GCC cloud.
• Familiarity with VAPT tools.
• Experience in a WOG or similar large-scale environment is preferred.
• Proficiency with Tenable, Nessus, and Splunk for vulnerability scanning and security monitoring.
• Knowledge of cybersecurity best practices and compliance requirements.
• Experience with conducting security risk assessments and incident management.

Personal Attributes:

• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team.
• High attention to detail and organizational skills.