C2C Job Hybrid Onsite – Information Security Specialist

The Information Security Specialist will provide specialized expertise in information, computer, and network security disciplines such as penetration testing, accreditation, and risk assessment. The role involves developing system security plans, conducting security audits and vulnerability analyses, and managing security tools and systems to protect critical infrastructure and data.
Key Responsibilities:

Develop system security plans and conduct certification and accreditation reviews.
Perform security audits, evaluations, vulnerability analysis, and risk assessments.
Assess and mitigate system security threats, risks, and security patches or incidents.
Execute penetration testing, password protection testing, and application security testing.
Manage, support, install, and maintain security tools and enterprise systems.
Follow NIST guidelines and industry standard compliance frameworks for risk management.
Required Skills:

Minimum 5 years of experience applying security policies, standards, testing, modification, and implementation (including at least 3 years in information security analysis).
Bachelor’s degree in an IT-related or Engineering field (or equivalent qualifying experience).
7 years’ experience within the last 10 years providing security vulnerability and risk assessment services.
Security Certification: Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA).
2 years’ experience with industry standard compliance frameworks (CIS, NIST, OWASP).
Understanding of State Administrative Manual (SAM) Section 5300, Information Security, and 2 years of computer forensic experience.
Extensive experience in configuration, support, and architectural design of enterprise network platforms (Palo Alto Firewalls, Cisco ASA, F5 BIG-IP).
3 years’ experience within the last 5 years with Microsoft Active Directory, AWS/Azure cloud environments, Linux/Windows servers, and web servers.
Preferred Qualifications:

Cisco Certified Internetwork Expert (CCIE) Routing and Switching or Cisco Certified Network Professional (CCNP) Security.
Microsoft Certified Solutions Expert (MCSE) Server Infrastructure or Palo Alto Network Certified Network Security Engineer (PCNSE).
F5 Certified Technology Specialist (F5-CTS ASM), GIAC Certified Penetration Tester, or Internet Security Certified Product Specialist.
3 years’ experience within the last 5 years with enterprise databases (SQL Server, Oracle, MySQL), Web API Services, and .NET Framework.
Ideal Candidate:
An experienced security professional with a strong background in NIST guidelines, penetration testing, and enterprise firewall and cloud infrastructure management. The ideal candidate brings extensive analytical skills and compliance expertise to protect state systems and secure critical data environments.