• Understands business objectives and problems, identifies alternative solutions, performs studies and cost/benefit analysis of alternatives. Analyzes user requirements, procedures, and problems to automate processing or to improve existing computer system: Confers with personnel of organizational units involved to analyze current operational procedures, identify problems, and learn specific input and output requirements, such as forms of data input, how data is to be; summarized, and formats for reports. Writes detailed description of user needs, program functions, and steps required to develop or modify computer program. Reviews computer system capabilities, specifications, and scheduling limitations to determine if requested program or program change is possible within existing system.
• Supports TIERS Operations, AWS Cloud Migration and TIERS Cloud Migration's Authority to Connect project by applying information security threat intelligence to identify and exploit vulnerabilities within different environments. On a daily basis you will perform analysis of on-prem and cloud security and operations related to security. Our ideal candidate has experience working in a large operations and development environments and is knowledgeable about custodian artifacts that are regulatory requirements. In this role you will assist IT operations and development teams to meet industry standards, and be proficient with the latest cybersecurity software. On a daily basis interacts with all aspects of IT responsible for the management of DevSecOps. Requires knowledge of infrastructure in IT operations including understanding of databases and system administration. This position may be required to come to the office once a week or more.

Minimum Requirements:

• 8 years of experience in coordinating and executing security policies, controls, and assessing vulnerabilities within the company.
• 8 years of experience with data and network security processing, security systems management, and security violation investigation.
• 8 years of experience performing analysis of on-prem and cloud security operations and working with DevSecOps teams for security-related activities.
• 8 years of understanding regulatory requirements, industry standards and trends, and proficiency with cybersecurity software. Working with DevSecOps and custodians.
• 8 years experience in managing various projects and overseeing all aspects.
• 8 years of strong ability to identify problems/issues, analyze and evaluate alternatives, and implement effective solutions.
• 8 years of experience in orchestrating calls including project kickoff, high/critical findings during testing, and close-out calls.
• 8 years of experience in implementing security measures to protect systems, networks, and data, including staying informed on hackers’ methodologies.
• 8 years of thorough experience with NIST 800-37, NIST 800-53, MARS-E controls, POA&Ms, and Corrective Action Plans.
• 8 years of experience reviewing computer security procedure violations and collaborating with HHSC/TIERS Security team.
• 8 years of experience with security web application firewalls.
• 8 years of experience in conflict management and issue resolution at managerial levels.
• 8 years of experience in reviewing audit responses, evidence gathering, and collaborating with IT for audit coordination.

​

Preferred Qualifications:

• 5 years as a skilled IT professional developing and implementing IT policy, standards, and procedures.
• 4 years of delivering technical training in cloud-based technology.
• 4 years of providing Windows and Linux OS and application support.
• 4 years of experience with information security risk assessments.
• 4 years of experience with security governance and documentation, security plan documents.
• 4 years of in-depth knowledge of AWS Cloud Security.
• 4 years of experience in-depth on AWS Cloud Security or with other Cloud service providers.
• 3 years of experience with ITIL - ticketing using Remedy and ServiceNow.
• 3 years of ability to train staff on network and information security.
• 3 years of experience with Archer GRC, Dynatrace, Splunk, Imperva Web Application Firewall, Qualys, and MS Office tools.

NA