Participates in the Change Control Board
Monitors for and investigates emerging cyber threats in BDO Public Sector cloud environment, and works with staff on recommending and implementing defensive actions
Contributes to System Security Plans (SSPs), Plan of Action & Milestones (POA&Ms), and other artifacts for audit readiness
Performs maintenance and enhancements on existing security alerts to reduce false positives
Leads the remediation efforts of vulnerabilities within cloud resources
Leads the Incident Response Team which includes monitoring for and determining Indicators of Compromise
Collaborates with security operations professionals to analyze triaged security alerts to determine the appropriate escalation and remediation paths
Designs and implements security related technologies such as MFA, FIDO2, endpoint detection and response (EDR), and mobile device management (MDM) within a GCC High tenant
Aligns enterprise IT planning with cybersecurity risk management strategies using NIST SP 800-171 and other applicable frameworks
Performs and reports phishing testing and develops necessary training
Escalates critical issues to management
Documents and maintains policies and procedures
Other duties as required
Supervisory Responsibilities
Directs day-to-day activities/workload of staff, as needed
Qualifications, Knowledge, Skills, and Abilities
Education
High school diploma or GED, required
Bachelor's degree in Cloud Computing, Information Technology, Information Science, Informatics, or Information Systems, preferred
Experience
Three (3) or more years of experience providing IT systems security support or incident response, required
License/Certifications
SC-100 – Microsoft Certified Cybersecurity Architect Expert, preferred
AZ-305 – Azure Solutions Architect Expert, preferred
AZ-500 – Azure Security Engineer Associate, preferred
Software
Proficiency with Microsoft Intune, Entra ID/Azure AD, Microsoft 365 Admin Center, and Microsoft Defender for Endpoint, required
Proficiency with Microsoft Office Suite, preferred
Proficiency with Power BI, Apple Business Manager, and MacOS and iOS management via Intune, preferred
Language
N/A
Other Knowledge, Skills, and Abilities
Strong verbal and written communication skills
Excellent interpersonal and customer relationship skills
Capacity to work in a deadline-driven environment while handling multiple complex projects/tasks simultaneously with a focus on details
Capable of successfully multi-tasking while working independently or within a group environment
Familiar with various regulatory policies (PCI, HIPAA, GLBA and other statutory regulations) as they relate to data security and IT policies, procedures, and standards
Basic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry recommended security frameworks
Strong understanding of security breach detection and mitigation
Ability to rely on extensive experience and judgment to plan and accomplish goals
Capable of working well under pressure while dealing with unexpected issues in a professional manner
Capacity to communicate and interact with all levels of employees and management
Ability to interact and build consensus among people
Ability to work after standard business hours and travel, as needed
Ability to design capabilities to find solutions to less common and more complex system problems
Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.
- National Range: $105,000 - $120,000
- Maryland Range: $105,000 - $120,000
- NYC/Long Island/Westchester Range: $105,000 - $120,000
