Cybersecurity Specialist (PCN 168007M)

Summary

The North Carolina Department of Agriculture and Consumer Services is seeking a Cybersecurity Specialist to support their information security program. The role involves conducting assessments, facilitating secure code reviews, analyzing security logs, and ensuring compliance with various security frameworks.

Responsibilities

• Support the department’s information security program by performing hands-on assessments of systems, networks, and applications to identify vulnerabilities and verify security control implementation
• Facilitate secure code reviews
• Analyze security logs
• Coordinate penetration testing activities
• Assist technical teams in applying remediation measures to strengthen system defenses
• Ensure compliance with required security and privacy frameworks such as HIPAA, HITECH, APIPA, IRS Pub 1075, PCI-DSS, and CJIS
• Support continuous monitoring efforts
• Triage alerts
• Support incident investigations through evidence gathering and documentation
• Contribute to the department’s overall information assurance posture by applying established methods and tools to protect systems and ensure secure operations

Skills

• Knowledge of defensive measures to detect, respond, and protect information, information systems, and networks from threats
• Knowledge of methods and procedures to protect information systems and data by ensuring their availability, authentication, confidentiality, and integrity
• Knowledge of methods, tools, and procedures, including development of information security plans, to prevent information systems vulnerabilities, and provide or restore security of information systems and network services
• Knowledge of principles, methods, and tools for analyzing and developing systems testing and evaluation procedures and technical characteristics of IT systems, including identifying critical operational issues
• Knowledge of the principles and methods of web technologies, tools, and delivery systems, including web security, privacy policy practices, and user interface issues
• Training in computer science, information systems, information assurance, cybersecurity, or a similar field and professional Information Technology experience
• Integrity/Honesty: Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics
• Reasoning: Identifies rules, principles, or relationships that explain facts, data, or other information; analyzes information and makes correct inferences or draws accurate conclusions
• Technical Expertise: Effectively applies technical knowledge to solve a range of problems; develops technical solutions to new or highly complex problems that cannot be solved using existing methods or approaches; is sought out as an expert to provide advice or solutions in the technical area
• Pass a fingerprinted background check
• Within 6 months of appointment, must be able to obtain ecfirst's Certified HIPAA Professional (CHP) certification (DOH paid)
• Cover letter
• Three (3) professional references, whom we may contact by phone, are required. One (1) of these references must be your current or most recent supervisor, if not already provided in the application
• Current performance evaluation, if available
• A copy of academic transcripts (unofficial is okay; please ensure that the institution name/URL is listed on the transcripts) is used to support that you meet the minimum qualifications competencies

Qualifications

Must Haves

• Knowledge of defensive measures to detect, respond, and protect information, information systems, and networks from threats
• Knowledge of methods and procedures to protect information systems and data by ensuring their availability, authentication, confidentiality, and integrity
• Knowledge of methods, tools, and procedures, including development of information security plans, to prevent information systems vulnerabilities, and provide or restore security of information systems and network services
• Knowledge of principles, methods, and tools for analyzing and developing systems testing and evaluation procedures and technical characteristics of IT systems, including identifying critical operational issues
• Knowledge of the principles and methods of web technologies, tools, and delivery systems, including web security, privacy policy practices, and user interface issues
• Training in computer science, information systems, information assurance, cybersecurity, or a similar field and professional Information Technology experience
• Integrity/Honesty: Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics
• Reasoning: Identifies rules, principles, or relationships that explain facts, data, or other information; analyzes information and makes correct inferences or draws accurate conclusions
• Technical Expertise: Effectively applies technical knowledge to solve a range of problems; develops technical solutions to new or highly complex problems that cannot be solved using existing methods or approaches; is sought out as an expert to provide advice or solutions in the technical area
• Pass a fingerprinted background check
• Within 6 months of appointment, must be able to obtain ecfirst's Certified HIPAA Professional (CHP) certification (DOH paid)
• Cover letter
• Three (3) professional references, whom we may contact by phone, are required. One (1) of these references must be your current or most recent supervisor, if not already provided in the application
• Current performance evaluation, if available
• A copy of academic transcripts (unofficial is okay; please ensure that the institution name/URL is listed on the transcripts) is used to support that you meet the minimum qualifications competencies

Benefits

• Option of telecommuting and flexible working hours
• This position has been approved for 100% telework in other cities in Alaska, as long as you have the bandwidth connectivity to perform the duties.
• Reliable internet connection required for Telework.
• Health insurance, which includes employer contributions toward medical/vision/dental
• Employer paid Basic Life insurance with additional coverage available (amount depends on Bargaining Unit)
• Optional Insurance Benefits: Group-based insurance premiums for term life (employee, spouse or qualified same sex partner, and dependents)
• Optional Insurance Benefits: Group-based insurance premiums for long-term and short-term disability
• Optional Insurance Benefits: Group-based insurance premiums for Accidental Death and Dismemberment
• Optional Insurance Benefits: Group-based insurance premiums for long-term care (self and eligible family members)
• Optional Insurance Benefits: Group-based insurance premiums for Supplemental Survivor Benefits
• Employee-funded flexible spending accounts for tax savings on eligible health care or dependent care expenses
• Membership in the Public Employees Retirement System (PERS)/Teachers' Retirement System (TRS)
• Matching employer contribution into a defined contribution program (new employees)
• Employer contribution into a defined benefit or defined contribution program (current employees)
• Contributions to the Alaska Supplemental Annuity Plan in lieu of contributions to Social Security
• Option to enroll in the Alaska Deferred Compensation Program
• Personal leave with an accrual rate increase based on time served
• Twelve (12) paid holidays a year