IT Security Incident Response Lead

Are you a technical expert in cyber security ready to lead a dynamic team in defending against cyber threats?

Join our hardworking team of IT security professionals at the Wisconsin Department of Transportation as the IT Security Incident Response Lead (IS Technical Services Consultant/Administrator) and play a pivotal role in our cybersecurity defense strategy!

WisDOT is a great place to work! In addition to meaningful and rewarding work, we offer a competitive benefits package featuring:

• Substantial leave time including at least 3.5 weeks of paid leave time to start, 9 paid holidays, and 130 hours of sick time that roll over each year.
• Excellent and affordable health, vision, and dental benefits (health plan options start at just $39/month for single plans and $97/month for family plans after two months of employment)
• A casual office atmosphere, flexible work schedules, and telework options depending on the position’s requirements
• An exceptional pension plan with employer match and lifetime retirement payment, plus an optional tax advantaged 457 retirement savings plan
• Well Wisconsin Wellness Program
• A free and confidential employee assistance program that offers employees and their immediate family dependents a variety of tools, resources, and professional consultation services to support their health, goals, and overall well-being
• Use this Total Rewards Calculator to see the total value of our competitive benefits package!

In addition to our generous employee benefits, we strive for inclusivity and celebrate different religious holidays and cultural observances and provide flexibility for utilizing paid time off for such celebrations. For more information on WisDOT you can visit our website by clicking here .

The Wisconsin Department of Transportation is an organization dedicated to creating transportation solutions through innovation and exceptional service. We are committed to fostering an environment rooted in Integrity, Diversity, Excellence, and Accountability . Click here to learn more about how we apply these values in our work.

The incumbent of this position will be tasked with leading cybersecurity incident response for the Wisconsin DOT . The Cyber Security Incident Response Lead will coordinate the preparation, detection/analysis, containment/eradication, and post-incident activity related to cybersecurity incidents . In this role, you will mentor and train the Cyber Security Incident Response Team, provide technical expertise related to the security incident response program, facilitate process development and improvement initiatives , and oversee programmed security breach simulation/tabletop exercises .

**We are looking for an experienced cyber security incident management professional with demonstrated experience responding to and recovering from cyber security incidents in large, complex, and matrixed environments. The incumbent must possess excellent business relationship experience as this role interacts with all levels of the organization, particularly within the IT units, and is viewed as a subject matter expert in mitigating risk around cyber security events.**

This position is in schedule-range (07-32) with an annual salary of $78,520 – $112,320 (or $37.75 – $54 per hour), plus excellent benefits . A twelve-month probationary period is required. Pay for current state employees will be set in accordance with the Wisconsin State Compensation Plan.

WisDOT does not sponsor work visas. Any appointment made will be contingent on the applicant being able to prove valid status to work in the United States. WisDOT is not an E-Verify employer.

Prior to any appointments for position(s) filled from this announcement, candidates may be subject to a comprehensive criminal background check which may include FBI fingerprinting.

Certain positions within this Department may allow remote/work from home flexibility for a portion of their work schedule, depending on the needs of the position and the work unit. This topic and any remote work flexibility that may be available will be discussed in more detail in the interview process. It is not anticipated that working outside of Wisconsin (or bordering cities) will be allowed because of the need to report to the Madison, Wisconsin office location on very short notice.

Minimally qualified applicants must detail having experience in all of the following in order to be considered:

• Responding to cyber security incidents in a large, regulated, complex, and matrixed environment
• Performing incident response activities (including security event monitoring concepts, escalation, and containment processes)
• Utilizing Endpoint Detection &amp Response (EDR) tools

Apply online! To apply, click “Apply for Job” to start the application process. Then, you will access your existing account or to create a new account if you don’t have an account. Once you are logged in, click “Apply for Job.” Follow the steps outlined in the application process and submit your application.

Your application materials are very important parts of your application and are used during our evaluation process to determine your qualifications as they relate to the job. For instructions on how to develop and what should be included in these materials, click here . For more information on the basics of the selection process and how the State of WI ensures fair and equitable treatment of all applicants, click here . The vast majority of applicants are able to outline their background and experience in their resume in 1-3 pages. Any resumes submitted with more than 10 pages will not be considered after page 10. If this job posting requires a letter of qualifications, the same limit applies.

Permanent classified state employees who are eligible for consideration (transfer or voluntary demotion) should complete the application process as described above by the stated deadline.

Submitted materials will be evaluated by a panel of job experts and the most qualified applicants will be invited to participate in the next step of the selection process. Questions related to the job and how to apply can be directed to Vicki Kaul at vicki.kaul@dot.wi.gov or 608-261-6302. For general wisc.jobs user information and technical assistance, please see the wisc.jobs Frequently Asked Questions page.

All application materials must be received by 11:59 p.m. CST on July 7th, 2024.