Description
Designs, develops, implements, and troubleshoots various information systems/cyber security software solutions for enterprise-wide cyber systems and networks; this job exists only in the central unit. Develops, tests, and validates solutions to remediate exploitable conditions on devices such as web servers, mail servers, routers, firewalls, and intrusion detection systems. Evaluates, codes, and implements software fixes (patches) to address system vulnerabilities such as malicious code (e.g., viruses), system exploitation using SQL injection, cross-site scripting, buffer overflows, parameter tampering, hidden field manipulation, cookie poisoning and web services manipulation. Conducts security assessments of systems and applications using penetration tests, ethical hacking tools and risk assessment/mediation methodologies to evaluate vulnerabilities. May be responsible for incident response, disaster recovery, and business continuity planning and providing analytical support for security policy development and analysis. Employees in this classification typically analyze, compare and evaluate various courses of action and have the authority to make independent decisions on matters of significance, free from immediate direction, within the scope of their responsibilities. Primary activities and decision making authority are predominantly performed independently affecting business operations to a substantial degree. Under FLSA, this is the exempt job classification for this title. Incumbents in this position must meet the full criteria for exempt status: salary level, salary basis, and duties tests.