Security Architect - Consultant

Novalink Solutions LLC•West Columbia, SC

About The Position

This consultant position supports the Office of Cybersecurity’s ongoing enterprise threat monitoring and incident response work. The role helps mature the agency’s Security Operations Center and advance its cyber threat detection and response capabilities, including services for on-premises and cloud-based equipment and critical applications. The position works directly for the CISO and supports agency, state, and federal security, privacy, and compliance goals. The project is described as ongoing, with a 36-month renewal, aggressive timelines, and fluid duties. Team members are expected to be productive, flexible, and able to contribute independently with minimal supervision in a fast-paced, change-oriented environment. The Cybersecurity Operations Lead provides operational leadership, guidance, and mentorship to SOC analysts; oversees incident identification, analysis, containment, and resolution; and advances continuous monitoring, incident response, playbooks, and alert-review processes. The role also contributes to threat hunting, risk analysis for the Medicaid Enterprise, security projects, continuous improvement, collaboration with technical and business teams, and audit readiness.

Requirements

At least 10 years of IT experience working with Windows, Linux, and web-based applications.
At least 5 years of experience with enterprise infrastructure design and deployment.
At least 5 years of related experience in a SOC lead capacity.
Hold any one or combination of the listed certifications: CISSP, GIAC Certified Incident Handler (GCIH), or Security+.
Communicate clearly verbally and in writing, interact effectively with vendors, project team members, management, and agency departments, and build relationships and facilitate with technical and non-technical personnel.
Organize information for technical explanations while accounting for the audience’s needs and aptitude.
Work independently and collaborate with multiple teams and vendors.
Multitask and prioritize effectively to meet deadlines.
Have intermediate-to-advanced skills in Microsoft Word, Excel, PowerPoint, and Visio, including working with templates and brand style guidelines.
Show keen attention to detail while maintaining a broad perspective.
Accept changes and constructive criticism in a fast-turnaround environment.
Have a firm understanding of cloud service provider offerings and capabilities.

Nice To Haves

Experience identifying, testing, and leading remediation of OWASP Top Ten, CWE/SANS Top 25, or similar software security issues.
Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements.
Prior experience working with eGRC systems.
Bachelor of Science degree in computer science, information technology, engineering, or a similar discipline.
Cloud certification, such as CASP+.
Network security certifications.

Responsibilities

Drive innovation and mature Security Operations capabilities.
Serve as an escalation point and provide leadership, mentorship, and guidance to SOC Analysts I, II, and III.
Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution.
Lead and mentor Security Operations analysts and help ensure they are trained and motivated.
Assist with staffing Security Operations positions.
Identify threats and analyze risks to the Medicaid Enterprise.
Assist in implementing and advancing continuous monitoring and incident response processes and procedures.
Review and refine playbooks, processes, and alert reviews to identify improvement opportunities.
Assist with advanced threat hunting to look for attacker presence in the environment.
Work with Information Technology, Application Development, and Business teams to advance Medicaid Enterprise security efforts.
Lead security team projects and continuous improvement efforts.
Collaborate with compliance teams to maintain audit-ready status.
Evaluate and select products and vendors to support initiatives.