Senior Cybersecurity Threat Engineer

Apex Systems is looking to hire a Cybersecurity/Information Security Lead to support our federal client here in Orange County, CA. If interested in position, please apply directly and/or send resume to Cameron at civey@apexsystems.com

Title: Cybersecurity Threat Manager

Location: Orange County, CA (on-site)

Contract to Hire

Job Description:

Our client is seeking a Senior Cybersecurity Threat Manager to support the Orange County Sheriff’s Department (OCSD) in Santa Ana, CA. The position entails providing technical leadership and oversight for the OCSD cybersecurity team, with a responsibility to protect OCSD assets, systems, and data against cyber threats. Cyber services provided are associated with (but not limited to) endpoint and email security, firewall management, and Incident Response.

Duties and Responsibilities:
• A team and project thought leader with experience driving successful projects and building success through mentoring other team engineers.
• Assist with managing and maintaining the security infrastructure environment and posture. Apply expert knowledge of cybersecurity and information technology to plan, configure, deploy, and/or maintain solutions aligned with OCSD policies to support full scope cyberspace operations.
• Lead the security incident lifecycle from detection and investigation, through response and follow-up actions. Facilitate incident analysis by gathering, retaining, and evaluating digital artifacts including media, logs, and network traffic. Recommend remediation strategies to close security gaps.
• Deploy, operate, and maintain active and passive monitoring capabilities, for endpoints and network hosts; assess systems for vulnerabilities, patch status, security configuration, and network mapping.
• Strong understanding of Palo Alto Networks architecture and technologies. Design, configure, and implement Palo Alto solutions including Panorama management console, Prisma cloud services, and Firewall management and support.
• Understanding of networking concepts including routing and switching
• Design, implement, and manage public and private Public Key Infrastructure (PKI) including certificate authorities (CA), intermediate certificates, certificate renewal, and secure key storage.
• Maintain and troubleshoot DNS architecture including multiple servers and various DNS resource records (A, CNAME, MX, TXT, NS, SRV, PTR, etc.)
• Understanding of wireless security through EAP-chaining, 802.1X, and certificate-based authentication
• Understanding of cloud security architecture and networking through user identity and access management, encryption of data, zero-trust approach, and segmentation
• Developing and maintaining infrastructure as code (IaC) through Terraform
• Strong understanding of identity management and role-based access control
• Identify process inefficiencies; propose and implement improved approaches to cyber team tasks.
• Familiarity with regulatory compliance, such as Criminal Justice Information Services (CJIS)
• Oversee OCSD cybersecurity communications, briefings, and contract deliverables; effectively communicate findings to senior staff through verbal and written methods.

Drive the team’s efforts to support core cyber functions and technologies such as:
• Endpoint Security, Anti-Virus (AV), Endpoint Detection and Response (EDR)
• Log Aggregation and Analysis, Security Information and Event Management (SIEM)
• Security Orchestration and Automation, specifically leveraging Palo Alto Cortex XSOAR
• Firewall Management using Palo Alto Networks Next Generation Firewalls
• Incident Response, Incident Management
• Private and Public PKI infrastructure
• Privileged identity management and role-based access control
• Privileged access management through CyberArk
• DNS architecture and security
• Wireless security through Cisco ISE
• AWS and Azure
• Entra ID
• ServiceNow
• Cyber Threat Intelligence Analysis
• Vulnerability Management using Tenable
• Email Security with Microsoft O365 Threat Explorer
• Data Loss Prevention (DLP)
• Protection of privacy information and sensitive data, in compliance with Federal and State mandates

Required Qualifications

Minimum Education/Experience:
• BS in Cybersecurity or related technical field, 7+ years relevant industry experience or MS in Cybersecurity or related technical field, 5+ years relevant industry experience, or PhD in Cybersecurity or related technical field with 4+ years industry experience.

Required Certifications: Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar.


Additional Qualifications:

• Professional experience providing technical leadership in support of a Security Operations Center (SOC) or similar organization that provides cyber security services.
• Strong understanding of Palo Alto Networks architecture and technologies. Expertise with Palo Alto Networks firewalls, intrusion prevention systems and other security products.
• Experience with network security design, deployment, and maintenance.
• Experience with troubleshooting security issues.
• Experience with providing support to users.
• Excellent communication and interpersonal skills.
• Strong Project Management
• Ability to work independently and as part of a team.
• Ability to work under pressure and meet deadlines.
• Ability to work flexible hours including weekends and overnight
• Ability to manage multiple projects simultaneously

Clearance

The selected applicant will be subject to the OCSD background check process as well as basic Live Scan background checks. A polygraph exam may be required if deemed necessary during the background check