Industry Knowledge/ Interpersonal Skills/ToolsIT policies and regulations, including the DoD Cybersecurity 8500 series. ISO 27002/PCI-DSS/ITIL/TOGAF/PIPEDA/GDPR, AGILE methodology and Software Defined Networks. Understanding of how malicious code operates and how vulnerabilities are exploited. Troubleshooting and requirements analysis NIST Special Publications, FISMA, OMB requirements, and cyber security best practices. Ability to support existing operational workflows in a timely, effective and detailed manner. Threat Hunting - Security Requirements Traceability Matrices (SRTM). Able to manage multiple projects under strict timelines, Critical thinker with strong problem-solving skills. Solid understanding of web application infrastructure and the common attack methods used my malicious adversaries. Solid understanding of forensic technologies and ability to capture and review forensic disk images. Security event report automation and automating feeds to other security technologies. Application debugging. Developing processes, implementing controls, and writing or working with information security policies. Network administration experience (routing and switching, connectivity troubleshooting, firewalls). Possesses comprehensive understanding of, and substantive experience in, the areas of network systems engineering, computing systems and software applications. Computer-based training and learning management systems (LMS). Network monitoring tools such as WireShark/ Palo Alto FW Administration/ Splunk SPL/ Zscaler ZIA. Experience developing information security policies and procedures. Strong understanding of the SA&A process and all documentation required. Strong understanding of ITSG-22, ITSG 33 and other standards. Strong knowledge of core IT and Security infrastructures including Active Directory, Microsoft Windows security controls, SIEM, AV, IPS, vulnerability scanners, Microsoft Azure/Office 365 security and compliance/Office DLP/Exchange Online Protection/Microsoft MFA/SSO/Conditional Access/B2B/B2C. Strong knowledge of all aspects of information security within the Prevent, Detect and Respond domains. Application scanning experience using tools such as Fortify, Coverity, BlackDuck, Seeker & Burpsuite. Exposure to Azure and AWS/Google Cloud Platform/ AWS cloud environment (AWS GuardDuty, Security Hub, Trusted Advisor, IAM Access Analyzer, CloudWatch Anomaly Detection. Knowledge of network and host IDS/IPS/VPN Administration. Ability to analyze and understand technical information.