This position is responsible for identifying weaknesses in current information security solutions to protect the college's computer infrastructure, networks, and data against cyber-attacks and internal threats. The Cybersecurity Engineer II will work closely with all ITS divisions to assist the Cybersecurity Engineer I with day-to-day operational security issues while also mentoring Cybersecurity Engineer I to provide guidance for complex security solutions and day-to-day operations.

Responsibilities and Duties (*Essential Functions)

To perform this job successfully, an individual must be able to perform the essential job functions satisfactorily.  Reasonable accommodations may be made to enable individuals with disabilities to perform the primary job functions herein described.    Assist Cyber Security III with short-term and long-term security solutions.

*Mentors Cybersecurity Engineer I to provide guidance for complex security solutions and day-to-day operations

*Serves as primary point-of-contact in reviewing threats and vulnerabilities and designing a mitigation strategy

*Research industry best practices to ensure appropriate products and standards are implemented to protect the college from vulnerabilities and unauthorized access

*Assist CSE III to confirm threat and vulnerability incidents are reported, documented, and resolved in accordance with established governance policies and procedures

*Responsible for monitoring of the College's security prevention and detection solutions, both internal systems and external, third-party services that provides protection for the college's network infrastructure and systems

Serves a secondary point-of-contact in emergency situations for information security threats. Responses are required during and after normal business hours to identify, assess and mitigate critical security issues

Assist CSE III with briefing materials to present to ITS Department leadership concerning vulnerabilities, security exposures, risks and impact of each to the institution

Develops and monitors processes for ensuring authorized access to college resources including permission violations and approving the revoking of permissions as needed

Participates in departmental risk assessments, security reporting and incident management as established by state guidelines and internal policies

Helps transform the overall cybersecurity culture of the college to meet industry standard

Qualifications

Knowledge, Skills, and Abilities  

Demonstrated experience in Internet and network security products and platforms, including intrusion detection, intrusion prevention, incident response, vulnerability assessments, and penetration testing

General understanding of industry standards and requirements for information security management, state and federal statutes, and third-party security assessments

Ability to work effectively with college leaders and IT engineering, operations, and support staff

Demonstrated knowledge of information security alerts, threat trends, intrusion analysis, malware, anomalous behavior, forensic research, and incident response protocols

Strong analytical, project management, and team-oriented interpersonal skills

Proven ability to work under pressure in emergencies and communicate security-related concepts to technical and non-technical staff