Threat Intel and Vulnerability Management Team Lead

DHRM•Chesterfield, VA

8d•Hybrid

About The Position

The Virginia Information Technologies Agency (VITA) is seeking a Threat Intel and Vulnerability Management Team Lead for the Commonwealth Security Risk Management (CSRM) Division. This role requires a fast-paced individual with excellent communication, presentation, and customer service skills, who can meet deadlines and mentor team members. The Team Lead will serve as the technical Subject Matter Expert (SME), coordinating daily operations, liaising with intelligence partners, and developing intelligence briefings to enhance the security of Commonwealth of Virginia (COV) systems. Responsibilities include supporting best practices, security enhancements, and notifying management of emerging threats impacting COV systems or data.

Requirements

Considerable experience performing Incident Response, Digital Forensics, Vulnerability Management or Threat Intelligence.
Considerable experience in identification, evaluation, and presentation of emerging threats and vulnerabilities.
Considerable experience evaluating security controls and presenting findings and written reports.
Considerable experience within web application scanning tools, vulnerability management tools, and/or threat management tools.
Considerable experience within systems/network administration, TCP/IP networking, and/or Security Operations Center (SOC) or Enterprise Helpdesk experience.
Experience interpreting complex information and providing informed analysis at a level that both technical and non-technical audiences can understand.
Experience as a people leader in the IT Security field.
Experience working all levels of management, internal and external stakeholders such as agencies, service providers, and third-party intelligence organizations.
Experience with interpretation and application of federal and state laws/regulations/standards/policies.
Knowledge of the NIST/SANS RISK framework.
Knowledge of cloud architectures and security.

Nice To Haves

Experience with scripting languages such as Python, PowerShell, etc.
Experience with SQL (standard query language) is a plus.
Experience with containerization platforms (Docker/Portainer/KB/OpenShift/Podman, etc.).
Experience with version control software (Git/GitHub/GitLabs/etc).

Responsibilities

Mentors staff in vulnerability management and threat intelligence gathering, analysis, and development.
Plans and implements improvements to the program through soliciting feedback from staff and customers.
Reviews and approves Security Intelligence Briefs to determine if the appropriate information has been provided to address the threat and to reduce the risk to COV systems and data.
Provides recommendations to management to strengthen the posture of COV data and systems.
Develops communications processes for distributing intelligence information as appropriate.
Research security trends and events in support of the incident response program.
Collects, analyzes, and correlates intelligence information with security incident data to determine what controls need to be prioritized to improve the security landscape of COV systems and data.
Tracks, analyzes, and develops statistics on the COV Threat Management program.
Coordinates with all levels of management to ensure that the COV Threat Intelligence Program is meeting the department and agency’s initiatives for Cyber Security.
Serves as a security response liaison between agencies, external directorates, law enforcement, and external partners (MS-ISAC, CISA, etc.).
Partners with internal and external security organizations to monitor security threats and recommends mitigating actions or response.