Manager, Threat & Vulnerability

Job Responsibilities

• Manage daily administrative functions and performance evaluations for direct reports within the Threat & Vulnerability Management scope of work.
• Ensure the timely and high-quality delivery of Cybersecurity services, including:
• Vulnerability Scanning & Remediation
• Threat & Vulnerability Advisory
• Daily Threat Monitoring & Response
• Incident Response
• Firewall Change Requests Review and relevant approvals
• Lead or support projects such as multi-factor authentication, advanced threat protection, cloud security, web filtering, web application testing, SOC development, artificial intelligence, centralized logging/SIEM, etc.
• Communicate security vulnerabilities and risk impacts effectively to stakeholders and support mitigation efforts.
• Analyze vulnerability data for root cause analysis and trend identification.
• Design and implement long-term solutions to systemic security issues.
• Support Cybersecurity Incident Response Team (CIRT) investigations and resolution efforts.
• Review and refine cybersecurity policies in partnership with the C(ISO), standards, and procedures for strategic alignment.
• Evaluate and select cybersecurity products and vendors through proof-of-concepts and formal assessments.
• Oversee the development of documentation and training materials, including:
• Project plans
• Executive presentations
• Technical reference documents
• Training/job aids
• Arcitecture diagrams
• Ensure consistent use of cybersecurity procedures and tools for vulnerability management and reporting.
• Stay informed about global threat landscapes, emerging technologies, and trends, and apply them to county operations.
• Balance business needs with security requirements and communicate tradeoffs clearly.
• Mentor junior managerial and technical staff.

Requirements

• Education: High school diploma or G.E.D. from an accredited institution.
• Experience: Minimum five (5) years of progressive work experience in Information Security, IT, Computer Science, or a related field.
• Knowledge, Skills, & Abilities: Proven leadership experience managing a team of 5 or more. Expertise in designing and implementing security technologies from concept to deployment. Strong interpersonal and communication skills for collaborating across departments. Strong Experience with Leadership reporting, Vulnerability assessments, Incident Management & SOC coordination.

Preferences

• Education: Bachelor’s degree from an accredited institution.
• Certifications: GIAC GVM / GREM / GCEDCEH (or better: hands-on offensive experience)
• Vendor certs: Rapid7, SentinelOne / Defender One or more of the following certifications: Certified Information Systems Security Professional (CISSP) Global Information Assurance Certification (GIAC) CompTIA Security+
• Experience: Hands-on experience with: Vulnerability scanning and penetration testing tools Security event monitoring and response platforms Threat intelligence gathering and analysis Experience in CIRT or other incident response efforts. Strong organizational skills and ability to manage multiple priorities. Ability to resolve challenges through consensus and influence. Excellent technical writing, analytical, and problem-solving skills. Enthusiasm for cybersecurity and ability to thrive in a collaborative environment. Broad understanding of cybersecurity frameworks (e.g., NIST, CIS Controls) and compliance regulations (e.g., PCI, HIPAA, CJIS).

General Information

• Location: 406 Caroline Street, Houston, TX 77002
• Work Arrangements: Hybrid - Specific schedule will be discussed with your direct Manager. 8 hours/days with on-call possibilities
• Employment may be contingent on passing a drug screen and meeting other standards.
• Due to a high volume of applications positions may close prior to the advertised closing date or at the discretion of the Hiring Department.