Senior Technical Support Specialist

State of Maine•Augusta, GA

2d•Hybrid

About The Position

The Senior Technical Support Specialist will provide operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. The role guides vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets. The position works with SOC leadership, ISO teams, contractor personnel, application and infrastructure teams, agency stakeholders, vendors, service providers, and leadership. It coordinates program resources, advises leadership, supports risk-informed decision-making, guides remediation priorities, and helps align vulnerability management and application testing activities with ISO priorities and statewide cybersecurity needs. The role supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation. It also provides technical guidance, training, and knowledge sharing to improve program readiness and consistency.

Requirements

At least 8 years of combined related post-secondary education, technical certifications, or technology-related work experience; related training and internship experience may be credited month for month.

Nice To Haves

Working knowledge of vulnerability management, application security testing, vulnerability assessment, remediation coordination, risk prioritization, and security operations.
Experience administering, configuring, tuning, or supporting vulnerability management or application testing platforms such as Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, HCL AppScan, Burp Suite, OWASP ZAP, or comparable technologies.
Experience coordinating enterprise vulnerability scanning, application testing intake, remediation tracking, exception review preparation, validation, or vulnerability reporting.
Experience with secure software development practices, OWASP Top 10 risks, dynamic or static application testing concepts, manual testing, penetration testing concepts, or cloud/container vulnerability review.
Ability to guide technical personnel, coordinate assigned resources, support operational coverage, and manage competing priorities across cybersecurity programs.
Experience communicating vulnerability findings, remediation priorities, risk trends, and operational recommendations to technical and non-technical audiences.
Experience developing or maintaining dashboards, KPIs, KRIs, executive summaries, operational metrics, testing procedures, remediation workflows, playbooks, knowledge articles, or program documentation.
Experience working with application teams, infrastructure teams, vendors, service providers, agency stakeholders, contractor personnel, or cross-functional technical teams.
Professional certifications such as CISSP, CISM, Security+, CySA+, CEH, PenTest+, GPEN, GWAPT, GWEB, OSCP, or comparable credentials.

Responsibilities

Assign and prioritize work, coordinate operational coverage, conduct follow-up, guide contractor personnel, and support program readiness.
Oversee enterprise vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting.
Coordinate application security testing intake, testing, analysis, validation, documentation, and communication of vulnerabilities.
Administer, configure, maintain, tune, and improve vulnerability management and application testing platforms.
Develop and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analyses.
Coordinate remediation activities with application and infrastructure teams, agency stakeholders, vendors, and service providers; communicate findings, track progress, and escalate unresolved or high-risk issues.
Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis.
Advise SOC management, ISO leadership, technical teams, vendors, service providers, and stakeholders on vulnerability management, application testing, remediation priorities, tools, risks, and program improvements.
Participate in stakeholder meetings and security initiatives; analyze requirements, support secure software development improvements, develop metrics, produce reports, and deliver briefings or presentations.
Develop and maintain operating procedures, testing procedures, remediation workflows, playbooks, knowledge articles, workflow diagrams, and other program documentation.
Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tools, remediation processes, and response procedures.

Benefits

Flexible scheduling
Up to 90% remote work with management approval
13 paid holidays
12 days of paid sick leave annually
Three or more weeks of paid vacation leave annually, with accrual increasing with years of service
Personal leave for overtime-exempt employees
State-paid 85%–100% of employee-only health insurance premiums, depending on salary
Health insurance premium credit that reduces employee-only premiums by 5% for participants
State-paid 100% of employee-only dental insurance premiums
State contribution of 14.06% of pay to MainePERS retirement plan
Gym membership reimbursement up to $40 per month
Health and dependent care flexible spending accounts
Public Service Student Loan Forgiveness eligibility
Employee assistance program (Living Resources Program)
42 consecutive calendar days of fully paid parental leave for employees welcoming a child
Potential additional unpaid leave under the Family and Medical Leave Act
Voluntary deferred compensation through a MaineSaves 457(b) account
Professional growth and development opportunities