Senior Security Advisor
About the role
thenwith summary. Then Responsibilities
Responsibilities
with- each duty. Then Qualifications
Qualifications
with maybe sub-sections? Could combine Skills, Knowledge & Abilities and Education & Experience into one list? But we need to preserve all info. Could haveSkills, Knowledge & Abilities
andEducation & Experience
. Also Pay and Schedule: posting includes salary: $70 - 75 per hour, work hours: 9am to 5pm. So we need Pay and Schedule sections. Benefits: they mention benefits package. So Benefits section. Location: Chicago, Illinois; job type: Contract; education: Bachelors. Those could be in a shortmetadata. Not headings. Also we must not repeat job title. No Job ID. Remove boilerplate like EEO, accommodation, etc. Also remove "Equal Opportunity Employer..." and accommodation line. Also remove "This posting is open for thirty (30) days." Also remove "Pay offered to a successful candidate will be based on several factors..." maybe that's part of Pay? But we already have salary range; we can keep that sentence? It's somewhat generic but still about pay. Might keep as part of Pay section? The instruction: include a section ONLY when posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. The posting states salary range and work hours, so Pay and Schedule sections are valid. Benefits: they mention comprehensive benefits package, list items. So Benefits section valid. We need to preserve all substantive info. So include location, job type, education maybe in a
after summary. We must not include duplicated lines. Ensure no extra fluff. Let's extract responsibilities list: - Drive security adoption and delivery with IT management and project staff through risk assessments, implementation of security controls and integration with appropriate processes/tooling. - Leads cross-domain security engagement with project teams in all phases of the development and implementation process. - Identifies emergent vulnerabilities and evaluates associated risks and threats endemic to IT projects throughout CNA. - Capable of developing security threat assessments and security stories for application development and project teams. - Facilitates discussions on security architecture and security tooling with respect to IT projects. - Evaluates and advises on appropriate security methods and control techniques such as firewalls, intrusion detection software, data encryption, data backup and recovery. - Understand cloud security solutions and review incoming cloud projects to provide guidance and support to technical cloud teams. - Provide guidance on cloud security standards/policies and advise on enabling cloud native controls to meet highest cyber security standards. - Maintains an awareness of existing and proposed security standard setting groups, State and Federal legislation and regulations pertaining to information security and data privacy. - Identifies regulatory changes that will affect information security policy, standards and procedures and recommends appropriate changes. - Develops and implements security standards, procedures and guidelines for multiple platforms and diverse systems environments (e.g., firm-wide, distributed, client server systems, and e-applications). - Develops communications and related campaigns for information security awareness among all staff. - Reviews the development, testing and implementation of security plans, products and control techniques. - Assist in investigations as needed and recommends appropriate corrective actions for information security incidents. - May perform additional duties as assigned. Now Qualifications sections: Skills, Knowledge & Abilities list (the bullet list after that heading). Let's extract each item: - Ability to influence change in corporate understanding and adoption of information security concepts. - Experience with solution architecting/engineering within the information security space. - Worked with security tooling, controls and/or architecting in a variety of roles. - Strong analytical and problem solving skills. - Robust communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients. - Solid understanding of security policy construction and publication. - Working knowledge of any of the common cloud platforms (AWS, Azure and GCP) - Ability to manage various technical projects to completion. - Willingness to learn new technologies, tools, applications and systems both supporting the information security organization and operations. Education & Experience: - Bachelor's degree in Computer Science, or related discipline, or equivalent work experience. - Typically a minimum of seven years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination. Also there is a "Skills" list after that: a long comma-separated list of keywords. That seems like duplicate of skills; we could incorporate into Skills section but we already have skills list. Might treat that as additional skills but it's just a list of keywords; we could include them as part of Skills, Knowledge & Abilities but they'd be redundant. The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we need to include that list somewhere. Could add a
Key Skills
with- each keyword? But that would be many items; maybe we can keep as a
with the list. However they said use
- for any list of duties/requirements/benefits. This is a list of skills, so we should use
- . But we already have a skills list; we could combine them. The long list includes many items like AWS, data backup, client server systems, etc. Many are already covered. To avoid duplication, we could just include the list as is, but we risk duplication. However the instruction says preserve ALL substantive information; duplication is okay if it's in the source. But we should avoid repeating same content? Not explicitly forbidden. Might be okay to include both but could be seen as redundant. Better to merge: we can create a single Skills section that includes both the bullet points and the keyword list. But we need to keep the bullet points as separate items; we could add the keyword list as additional
- items. Let's parse the keyword list: "AWS,data backup,client server systems,cloud security solutions,cloud security,security architecture,information security,information security policy,information security concepts,firewalls,GCP,IT management,IT projects,Computer Science,intrusion detection,Azure,network protocols,application development,analytical,communications,work effectively,interpersonal skills,Ability to influence,problem solving skills,architecting,construction,advise,consulting,control techniques,corrective actions,data encryption,technical account management,data privacy,Federal legislation,cyber security standards,operating systems,publication,investigations,risk assessments,risks,security,security controls,security tooling,security policy,Willingness to learn new technologies,testing,threat assessments,tooling,vulnerabilities" We can split by commas and trim. Many are phrases. We'll create
- for each.
But note some items are duplicates of bullet points (e.g., "Ability to influence", "problem solving skills", "Willingness to learn new technologies"). We'll keep them; duplication okay.
Now Pay section: salary: $70 - 75 per hour. Also note "Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc." This is additional info about pay determination. We'll include that as part of Pay section maybe as a
. Schedule section: work hours: 9am to 5pm. Benefits section: "In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility)." We'll list each benefit as
- .
Location, job type, education: we can put in a
after summary: "Location: Chicago, Illinois. Job type: Contract. Education: Bachelor's degree." Now ensure we don't include boilerplate: Remove Equal Opportunity Employer paragraph, accommodation line, "This posting is open for thirty (30) days." Also remove "At Randstad Digital, we welcome people of all abilities..." etc. Now produce HTML fragment. Structure:
About the role
Individual contributor responsible for leading and managing numerous tactical engineering workflows, individualize security consultations for project teams and acting as the cross-domain security contact for a portfolio of business lines. This role will act as the tactical advisors and consultants to project teams working on everything from cloud application deployments to network infrastructure overhauls. Individual contributor role providing guidance on directing, evaluating, developing, implementing, communicating, operating, monitoring and maintaining information security technologies, policies and procedures.
Then maybe location etc in a. Then Responsibilities
Responsibilities
- with each duty.
Then Qualifications: maybe split into two headings:
- items. Then add the keyword list items as additional
- . Might cause duplication but okay. Now Education & Experience items: - Bachelor's degree in Computer Science, or related discipline, or equivalent work experience. - Typically a minimum of seven years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination. Now Benefits items list: - medical - prescription - dental - vision - AD&D
Skills, Knowledge & Abilities
- with bullet points + keyword list items. Then
Education & Experience
- with two items.
Then Pay
Pay
Salary: $70 - 75 per hour. Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc.
Then ScheduleSchedule
Work hours: 9am to 5pm.
Then BenefitsBenefits
- with each benefit.
Make sure no extra whitespace? It's fine.
Now craft the keyword list items. Let's split:
AWS
data backup
client server systems
cloud security solutions
cloud security
security architecture
information security
information security policy
information security concepts
firewalls
GCP
IT management
IT projects
Computer Science
intrusion detection
Azure
network protocols
application development
analytical
communications
work effectively
interpersonal skills
Ability to influence
problem solving skills
architecting
construction
advise
consulting
control techniques
corrective actions
data encryption
technical account management
data privacy
Federal legislation
cyber security standards
operating systems
publication
investigations
risk assessments
risks
security
security controls
security tooling
security policy
Willingness to learn new technologies
testing
threat assessments
tooling
vulnerabilities
Note some items have capitalization; keep as is.
Now combine with bullet points from Skills, Knowledge & Abilities:
- Ability to influence change in corporate understanding and adoption of information security concepts.
- Experience with solution architecting/engineering within the information security space.
- Worked with security tooling, controls and/or architecting in a variety of roles.
- Strong analytical and problem solving skills.
- Robust communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients.
- Solid understanding of security policy construction and publication.
- Working knowledge of any of the common cloud platforms (AWS, Azure and GCP)
- Ability to manage various technical projects to completion.
- Willingness to learn new technologies, tools, applications and systems both supporting the information security organization and operations.
We'll add these as
- for any list of duties/requirements/benefits. This is a list of skills, so we should use
- each keyword? But that would be many items; maybe we can keep as a