MAD Security Careers
Come join a team of some of the brightest and most innovative security experts around!
MAD Security offers a very competitive compensation package that includes base salary, medical, 401k matching, bonuses (we like to reward you for your hard work), training on next generation security tools, and flexible time off.
For Trusted Partners (1099):
We are also looking for partners that we can work with that can augment our skills and add depth to our team. We frequently receive requests for work that is a little out of our lane or that we can’t take on due to full bookings, and in those cases we like to work with trusted partners to create win/win scenarios.
MAD Security Career Postings:
Junior Cybersecurity Consultant
- Job Title
- Junior Cybersecurity Consultant
- Job ID
- Huntsville, AL 35806
- Other Location
Junior Cybersecurity Consultant
MAD Security is the premier Managed Security Services Provider that combines technology, services, support, and training to simplify the cybersecurity challenge. We regularly provide our services and expertise to defense industry-based contractors, aviation and aerospace companies, government contractors, financial institutions, technology services companies, higher education institutes, and manufacturing entities to manage risk, meet compliance requirements, and reduce costs, while bringing them peace of mind.
Our team members consist of passionate security practitioners and thought leaders that continuously share forward thinking and innovative ideas. Team members work in a dynamic and collaborative environment providing our clients innovative solutions that fit their needs and keep their organizations safe from today’s cybersecurity threats. Team members employ cyber and information security methodologies designed to assess the triad of people, processes, and technologies.
Are you interested in becoming an experienced Security Control Assessor (SCA)? Have you authored cybersecurity policies? Do you have experience providing consultation services to clients?
We’re looking for a team member who is interested in becoming an experienced assessor familiar with multiple security frameworks to include RMF, CSF, NIST, CMMC, PCI, HITRUST, ISO, SOC, and more. The candidate should have some experience conducting interviews and asking questions to determine the state of an environment while capturing evidence and artifacts to support the assessment results. The candidate should be familiar with cybersecurity policies and have experience writing, editing, and revising policies to align with organizational objectives. This person should be comfortable with providing cybersecurity advice and consultation to clients, understanding how to build rapport and maintain client relationships with a focus on partnership to address their cybersecurity challenges. The ideal candidate will be comfortable speaking with and briefing company CEOs and Presidents as well as Information System Managers and Cybersecurity Specialists.
This team member will
- Assist with Cybersecurity gap assessments and provide resulting reports.
- Assist with Cybersecurity consulting engagements to assist with and partner on client’s POA&M remediation efforts.
- Educate clients on information security and applicable control requirements.
- Baseline existing risks, exposure, and compliance levels.
- Advise on risk mitigation and remediation plans.
- Provide information security consulting to clients based on industry best practices.
- Provide continuous evaluation and improvement of methodologies and internal processes.
- Communicate regularly with team and with clients to proactively address concerns.
- Work collaboratively with MAD Security’s Sales, Technical Testing Team, and SOC to provide a holistic and seamless cybersecurity experience for the client.
- Integrity: Is ethical and respectful to clients and team.
- Grit: Ability to self-motivate and self-manage, ability to meet deadlines when faced with competing priorities.
- Is customer-centric: Understands that partnership with our clients is a “win-win” scenario.
- Selfless: Understands that when one team member succeeds, we all succeed.
- Knowledge of Risk Management, IT Governance, and Information Security best practices, standards and frameworks such as NIST, FFIEC, ISO, CIS 20, HIPAA, etc.
- 2+ years of experience in the information security field.
- Good time management, project management and problem-solving skills.
- Security controls and/or architecture assessment experience.
- Experience interviewing IT and non-IT staff to identify as-is processes and procedures.
- Understanding of information security engagements with a preference for DFARS, NIST, and CMMC assessments.
- Knowledge of security control implementations in various environments.
- Experience authoring cybersecurity policies, procedures (to include Incident response, business continuity, disaster recovery, and more).
- Significant experience working as a consultant working in a consulting firm managing multiple client projects.
- A desire to take on roles of increasing responsibility including defining services, managing teams and coordinating resources.
- One or more of the following: CAP, CySA+, SSCP, Security+ or equivalent certification.
- Application Security and/or Vulnerability Assessment experience.
- Penetration Testing and Social Engineering knowledge.
- High level working knowledge of security solutions such as endpoint security, DLP, SIEM, etc., and what problems those solutions are designed to solve.
- Knowledge of various security technologies and leading product families.
- Ability to review security architecture and advise on security requirements.
- Bachelor’s or Master’s degree in Information Assurance, Cyber Security, Computer Science, Business Management or other related field, or equivalent experience.