Description
Designs, develops, implements, and troubleshoots various information systems/cyber security software solutions for enterprise-wide cyber systems and networks; this job exists only in the central unit. Develops, tests, and validates solutions to remediate exploitable conditions on devices such as web servers, mail servers, routers, firewalls, and intrusion detection systems. Evaluates, codes, and implements software fixes (patches) to address system vulnerabilities such as malicious code (e.g., viruses), system exploitation using SQL injection, cross-site scripting, buffer overflows, parameter tampering, hidden field manipulation, cookie poisoning and web services manipulation. Conducts security assessments of systems and applications using penetration tests, ethical hacking tools and risk assessment/mediation methodologies to evaluate vulnerabilities. May be responsible for incident response, disaster recovery, and business continuity planning and providing analytical support for security policy development and analysis. Under FLSA, incumbents in this position are nonexempt.