Threat Intel and Vulnerability Management Team Lead

Virginia Information Technologies Agency•Chesterfield, VA

9d•$120,000 - $140,000•Hybrid

About The Position

The Virginia Information Technologies Agency (VITA) is offering a competitive opportunity to serve as a Threat Intel and Vulnerability Management Team Lead within the Commonwealth Security Risk Management (CSRM) Division. This role requires an individual who can thrive in a fast-paced environment, possesses excellent communication, presentation, and customer service skills, and has experience in meeting deadlines and mentoring team members. As the technical Subject Matter Expert (SME) for the team, the Lead will utilize strong analytical and problem-solving skills to coordinate daily operations, act as a liaison between intelligence partners, and develop intelligence briefings to enhance the security posture of Commonwealth of Virginia (COV) systems. The position also involves supporting the implementation of best practices, security enhancements, and notifying management of emerging threats that could impact COV systems or data.

Requirements

Considerable experience performing Incident Response, Digital Forensics, Vulnerability Management or Threat Intelligence.
Considerable experience in identification, evaluation, and presentation of emerging threats and vulnerabilities.
Considerable experience evaluating security controls and presenting findings and written reports.
Considerable experience within web application scanning tools, vulnerability management tools, and/or threat management tools.
Considerable experience within systems/network administration, TCP/IP networking, and/or Security Operations Center (SOC) or Enterprise Helpdesk experience.
Experience interpreting complex information and providing informed analysis at a level that both technical and non-technical audiences can understand.
Experience as a people leader in the IT Security field.
Experience working all levels of management, internal and external stakeholders such as agencies, service providers, and third-party intelligence organizations.
Experience with interpretation and application of federal and state laws/regulations/standards/policies.
Knowledge of the NIST/SANS RISK framework.
Knowledge of cloud architectures and security.

Nice To Haves

Experience with scripting languages such as Python, PowerShell, etc.
Experience with SQL (standard query language) is a plus.
Experience with containerization platforms (Docker/Portainer/KB/OpenShift/Podman, etc.).
Experience with version control software (Git/GitHub/GitLabs/etc).

Responsibilities

Mentors staff in vulnerability management and threat intelligence gathering, analysis, and development.
Plans and implements improvements to the program through soliciting feedback from staff and customers.
Reviews and approves Security Intelligence Briefs to determine if the appropriate information has been provided to address the threat and to reduce the risk to COV systems and data.
Provides recommendations to management to strengthen the posture of COV data and systems.
Develops communications processes for distributing intelligence information as appropriate.
Research security trends and events in support of the incident response program.
Collects, analyzes, and correlates intelligence information with security incident data to determine what controls need to be prioritized to improve the security landscape of COV systems and data.
Tracks, analyzes, and develops statistics on the COV Threat Management program.
Coordinates with all levels of management to ensure that the COV Threat Intelligence Program is meeting the department and agency’s initiatives for Cyber Security.
Serves as a security response liaison between agencies, external directorates, law enforcement, and external partners (MS-ISAC, CISA, etc.).
Partners with internal and external security organizations to monitor security threats and recommends mitigating actions or response.