Senior Cybersecurity Advisor

State of Maryland • Baltimore City, MD

11h

About The Position

The Senior Cybersecurity Advisor is a subject matter expert role responsible for providing expert guidance and technical leadership in the design, implementation, and continuous improvement of DHS’s cybersecurity infrastructure. This position is critical for advancing the agency's security architecture, including the successful implementation of a Zero Trust security model and the integration of DevSecOps practices across all digital asset lifecycles. They ensure the confidentiality, integrity, and availability of all digital assets, networks, and data against cyber threats, while adhering to industry-specific regulations and compliance standards. This role focuses on hands-on technical solutions, strategic advisory, and maintaining a deep understanding of evolving threats and cutting-edge security practices in government.

Requirements

• A Bachelor's degree from an accredited college or university in Computer Information Technology, Management Information Systems, or other IT-related field (including coursework in systems analysis and application programming) may be substituted for the required experience.
• Seven years in Information Security/Cybersecurity, with at least 5 years specifically in a strategic advisory or program leadership capacity.

Nice To Haves

• One or more of these certifications: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CISA (Certified Information Systems Auditor) CCISO (Certified Chief Information Security Officer)
• Five years experience in NIST Risk Management Framework (RMF), ISO/IEC 27001, or Zero Trust Architecture.
• Five years providing high-level guidance on the integration of cloud security.

Responsibilities

• Develop and implement a comprehensive Zero Trust strategy and architecture to secure all DHS resources and access.
• Design and implement security automation tools and processes for DevSecOps pipelines to ensure security is integrated throughout the software development lifecycle.
• Provide technical expertise on securing cloud environments and integrating security controls with cloud service providers (CSPs).
• Maintains and expands comprehensive understanding of cybersecurity threats and trends.
• Policy Development and Compliance. Develop policies and protocols in support of Zero Trust and DevSecOps objectives.
• Derive and promulgate operating instructions on data handling and sharing from Maryland and DHS policies in coordination with the DHS Data Office
• Communication and Engagement. Develop targeted role-based security training program around Zero Trust responsibilities and impact for all employees, contractors, and approved system users.
• Align with cybersecurity and Office of Learning colleagues for deployment, tracking and feedback.

Benefits

• Contractual employees who work for an agency covered under the State Employee and Retiree Health and Welfare Benefits Program, have a current employment contract and work 30 or more hours a week (or on average 130 hours per month) may be eligible for subsidized health benefits coverage for themselves and their dependents.
• As a contractual employee, you will be responsible for paying 25% of the premiums for your medical and prescription coverage, including any eligible dependents you have enrolled.
• The State of Maryland will subsidize the remaining 75% of the cost for these benefits.
• You can also elect to enroll in dental coverage, accidental death and dismemberment insurance, and life insurance, but will be responsible to pay the full premium for these benefits.
• Leave may be granted to a contractual employee at a rate of one hour for every 30 hours worked, not to exceed 40 hours per calendar year.

What This Job Offers

• Career Level: Senior