{"id":3983479,"url":"https://alion.io/job/novalink-solutions-security-architect-consultant-2","title":"Security Architect - Consultant","company":{"id":4449854,"name":"Novalink Solutions","domain":"novalink-solutions.com","url":"https://alion.io/company/novalink-solutions-llc","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbia, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Windows","optional":false},{"name":"CWE","optional":true},{"name":"Microsoft Office","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-11-09T20:46:48Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T18:21:29Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced consultants, and we are seeking individuals who are highly productive, very flexible, and can work in an environment where fluidity of duties is common. Each team member is expected to contribute with minimal supervision. \nCandidates who enjoy working on complex, change-oriented projects with motivated team members will find this position attractive.\nThe Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. This position requires a broad and keen understanding of technology and IT delivery of Security Operation services for on premise and cloud based equipment and critical applications. A strong candidate for this position should possess experience in the following:\nCyber Threat Response and Incident Handling\nCyber Security Operations\nSecurity Service Portfolio Management\nDAILY DUTIES / RESPONSIBILITIES:\nThe Cybersecurity Operations Lead will be in a unique position to help mature our Security Operations Center capability and will work directly for the CISO to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. Candidates should be self-starters, creative problem solvers and have an eagerness to implement tactics, techniques and procedures which make the most effective use of Agency staff, resources, products and technologies quickly.\nEssential Responsibilities\n1. Drive innovation and maturation of Security Operations capabilities\n2. Act as an escalation point and provide leadership, mentorship, and guidance to SOC Analyst I, II, and III\n3. Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution\n4. Lead and mentor a team of Security Operations analysts, ensuring they are well-trained and motivated\n5. Assist in staffing Security Operations staff\n6. Perform threat identification and analysis of risks to the Medicaid Enterprise\n7. Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures\n8. Consistently review and refine Playbooks, Process, and Alert reviews to identify areas of improvement\n9. Assist with advanced threat hunting, looking for attacker presence within the environment\n10. Work with Information Technology, Application Development and Business Teams to advance security efforts of the Medicaid Enterprise\n11. Lead security team projects, and continuous improvement\n12. Collaborate with compliance teams to maintain audit-ready status\nREQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):\n1. 10+ years of experience of IT working with Windows, Linux, and Web-based applications\n2. 5+ years of experience with enterprise infrastructure design and deployment\n3. 5 years of related experience in a SOC lead capacity\nPREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):\n1. Experience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.\n2. Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements\n3. Prior experience in working with eGRC systems\nREQUIRED EDUCATION/CERTIFICATIONS:\nANY ONE OR COMBINATION OF:\nCERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP)\nGIAC CERTIFIED INCIDENT HANDLER (GCIH)\nSECURITY + PREFERRED EDUCATION/CERTIFICATIONS:\nBS degree in computer science, information technology, engineering or similar discipline\nCloud certification (i.e. CASP +)\nNetwork security certifications\nADDITIONAL SKILLS & DUTIES:\n1. Ability to communicate clearly, verbally and in writing; to interact effectively with internal and external vendors, project team members, management and agency departments; to build relationships and use facilitation skills with both technical and non-technical personnel\n2. Experience in organizing information in a way that is appropriate for technical explanations without losing sight of the needs and aptitude of the audience\n3. Ability to work independently and collaborate with multiple teams and vendors\n4. Ability to multitask and prioritize tasks effectively in order to meet deadlines\n5. Must be intermediate to advanced skills in additional Microsoft Office products (Word, Excel, PowerPoint, Visio) and working with templates and style guidelines for branding consistency\n6. Keen attention to detail while maintaining the ability to see the big picture\n7. Experience with the evaluation and selection of products and vendors to support initiatives.\n8. Ability to accept changes and constructive criticism in a fast turn-around environment\n9. A firm understanding of the offerings and capabilities within Cloud service providers and technologies\nThis is an ongoing project with aggressive timelines. A majority of the team is made up\nof experienced consultants, and we are seeking individuals who are highly productive,\nvery flexible, and can work in an environment where fluidity of duties is common. Each\nteam member is expected to contribute with minimal supervision.\nCandidates who enjoy working on complex, change-oriented projects with motivated\nteam members will find this position attractive.\nWHY IS THIS POSITION OPEN (new role, increased work load, new dept, resignation, promotion)?\nIf backfill Position - What separated the candidate you initially selected from all the other\nresumes presented?\n36 Month Renewal: This position is needed to provide direct support to the Office of\nCybersecurity to meet Agency, State and Federal security & privacy goals and\ncompliance requirements.\nSCOPE OF THE PROJECT:\nThe Office of Cybersecurity is tasked with performing ongoing enterprise cybersecurity\nthreat monitoring and incident response capabilities. This position requires a broad and\nkeen understanding of technology and IT delivery of Security Operation services for on\npremise and cloud based equipment and critical applications. A strong candidate for this\nposition should possess experience in the following:\nCyber Threat Response and Incident Handling\nCyber Security Operations\nSecurity Service Portfolio Management\n(CYBER OPERATIONS AND THREAT MANAGEMENT LEAD)\nDAILY DUTIES / RESPONSIBILITIES:\nThe Cybersecurity Operations Lead will be in a unique position to help mature our\nSecurity Operations Center capability and will work directly for the CISO to drive\ninnovation and maturation of the Agency Cyber threat detection and response\ncapabilities. We are looking for candidates who are highly organized, can work\nindependently in a fast-paced environment and produce multiple quality deliverables\nwithin defined deadlines. Candidates should be self-starters, creative problem solvers and\nhave an eagerness to implement tactics, techniques and procedures which make the most\neffective use of Agency staff, resources, products and technologies quickly.\nEssential Responsibilities\n1. Drive innovation and maturation of Security Operations capabilities\n2. Act as an escalation point and provide leadership, mentorship, and guidance to\nSOC Analyst I, II, and III\n3. Oversee the identification, analysis, and response to security incidents, ensuring\nrapid containment and resolution\n4. Lead and mentor a team of Security Operations analysts, ensuring they are well-\ntrained and motivated\n5. Assist in staffing Security Operations staff\n6. Perform threat identification and analysis of risks to the Medicaid Enterprise\n7. Assist in the implementation and advancement of Continuous Monitoring and\nIncident Response processes and procedures\n8. Consistently review and refine Playbooks, Process, and Alert reviews to identify\nareas of improvement\n9. Assist with advanced threat hunting, looking for attacker presence within the\nenvironment\n10. Work with Information Technology, Application Development and Business\nTeams to advance security efforts of the Medicaid Enterprise\n11. Lead security team projects, and continuous improvement\n12. Collaborate with compliance teams to maintain audit-ready status\nREQUIRED SKILLS (RANK IN ORDER OF\nIMPORTANCE):\n1. 10+ years of experience of IT\nworking with Windows, Linux, and\nWeb-based applications\n2. 5+ years of experience with\nenterprise infrastructure design and\ndeployment\n3. 5 years of related experience in a\nSOC lead capacity\nPREFERRED SKILLS (RANK IN ORDER OF\nIMPORTANCE):\n1. Experience identifying, testing and\nleading remediation efforts of\nOWASP Top Ten, CWE/SANS\nTOP 25 Most Dangerous Software\nErrors, etc.\n2. Prior experience performing\npenetration testing and vulnerability\nassessments in organizations\nsubject to FISMA or similar\nrequirements\n3. Prior experience in working with\neGRC systems\nREQUIRED EDUCATION/CERTIFICATIONS:\nANY ONE OR COMBINATION OF:\nCERTIFIED INFORMATION SYSTEMS\nSECURITY PROFESSIONAL (CISSP)\nGIAC CERTIFIED INCIDENT HANDLER\n(GCIH)\nSECURITY +\nPREFERRED EDUCATION/CERTIFICATIONS:\nBS degree in computer science,\ninformation technology,\nengineering or similar discipline\nCloud certification (i.e. CASP +)\nNetwork security certifications\nINTERVIEW PROCESS (phone, video or in-\nperson, how many rounds of i/v’s, etc)?\nIn-Person, Video\nADDITIONAL SKILLS & DUTIES:\n1. Ability to communicate clearly,\nverbally and in writing; to interact\neffectively with internal and\nexternal vendors, project team\nmembers, management and agency\ndepartments; to build relationships\nand use facilitation skills with both\ntechnical and non-technical\npersonnel\n2. Experience in organizing\ninformation in a way that is\nappropriate for technical\nexplanations without losing sight of\nthe needs and aptitude of the\naudience\n3. Ability to work independently and\ncollaborate with multiple teams and\nvendors\n4. Ability to multitask and prioritize\ntasks effectively in order to meet\ndeadlines\n5. Must be intermediate to advanced\nskills in additional Microsoft Office\nproducts (Word, Excel, PowerPoint,\nVisio) and working with templates\nand style guidelines for branding\nconsistency\nKeen attention to detail while\nmaintaining the ability to see the\nbig picture\n7. Experience with the evaluation and\nselection of products and vendors to\nsupport initiatives.\n8. Ability to accept changes and\nconstructive criticism in a fast turn-\naround environment\n9. A firm understanding of the\nofferings and capabilities within\nCloud service providers and\ntechnologies\nRequirements\nRequired Skills\nSkill Type\nSkill Name\n\nAny one of the following certifications:\nCERTIFIED INFORMATION SYSTEMS SECURITY PROFESSIONAL (CISSP), GIAC CERTIFIED INCIDENT HANDLER (GCIH), or SECURITY +\n\n10+ years of experience of IT working with Windows, Linux, and Web-based applications\n\n5+ years of experience with enterprise infrastructure design and deployment\n\n5 years of related experience in a SOC lead capacity\nPreferred Skills\nSkill Type\nSkill Name\n\nBS degree in computer science, information technology, engineering or similar discipline\n\nCloud certification (i.e. CASP +)\n\nNetwork security certifications\n\nExperience identifying, testing and leading remediation efforts of OWASP Top Ten, CWE/SANS TOP 25 Most Dangerous Software Errors, etc.\n\nPrior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements\n\nPrior experience in working with eGRC systems","description_format":"text","description_chars":11499,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-11-09T20:46:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 13 · green card filings: 6","filings_12m":13,"filings_prev_12m":22,"green_card_filings_12m":6,"median_offered_wage_usd":124605,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":0,"expected_fill_days":5,"reasons":["conf:4","agency","velocity","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/novalink-solutions-security-architect-consultant-2","json_url":"https://alion.io/job/novalink-solutions-security-architect-consultant-2.json","meta":{"generated_at":"2026-11-10T20:52:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13850,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4449854},"rest":"https://alion.io/mcp/rest/get_company?id=4449854"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnovalink-solutions-security-architect-consultant-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnovalink-solutions-security-architect-consultant-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnovalink-solutions-security-architect-consultant-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/novalink-solutions-security-architect-consultant-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnovalink-solutions-security-architect-consultant-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3983479}},{"tool":"search_jobs","arguments":{"company":"novalink-solutions.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3983479},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}