Job Summary
Candidate MUST be a Wisconsin resident or willing to relocate to Wisconsin prior to starting the role at their own expense. This position can work 100% remote with occasional onsite visits 1-2 times required throughout the duration of the contract.
Seeking an expert senior technical leader and engineer to serve as a strategic advisor to the CISO and drive an implementation. This role balances high-level strategic advisory with hands-on engineering, operating on a "teach-by-doing" knowledge transfer model. The primary objective is to build long-term internal capabilities while operationalizing and enforcing the newly updated Flaw Remediation (SI-2) Standard. This initiative transitions us from reactive, manual vulnerability management to an AI-accelerated, continuous authorization, and automated DevSecOps posture.
The consultant shall perform hands-on engineering, deliver strategic CISO advisory, and provide direct mentoring across core operational pillars.
location: Madison, Wisconsin
job type: Contract
salary: $128.66 - 134.97 per hour
work hours: 8am to 5pm
education: Bachelors
Responsibilities
CISO Strategic Advisory and Engineering
- Act as a direct technical advisor to the CISO, translating federal mandates, emerging AI threat models, and architectural gaps into actionable enterprise security directives.
- Execute a hands-on knowledge transfer model, co-engineering data pipelines and security automation alongside internal DET staff to institutionalize elite technical skills.
- Deliver real time training and co-develop automation playbooks within the security operations (SecOps) using live demonstration approach.
Flaw Remediation (SI-2) Standard Operationalization
- Tier Optimization & Enforcement: Architect automated tracking, logging, and validation mechanisms to implement compliance with updated SI-2 timeframes:
- Tier 1 (Highest Urgency): Ensure all public-facing vulnerabilities, CISA KEV listings, active exploits, and identity/privileged system flaws implement approved mitigations or compensating controls within 24 hours, with full remediation closed inside 7 calendar days.
- Tier 2 (High-Risk/Internal): Configure alerting and metric reporting to validate mitigation within 48 hours and full remediation within 15 calendar days.
- Tier 3 (Moderate/Low): Establish repeatable monthly scheduling to ensure remediation within 30 calendar days.
- Clean Deployment Architectures: Partner with agency development teams to pivot away from manual, in-place patching. Author and implement automated templates for clean deployments using virtualized system images, containers, and cloud-native configurations.
- DevSecOps Integration: Embed secure builds, automated software testing, code scanning, and dependency updates natively into agency deployment pipelines.
AI Capability Deployment & Toolchain Integration
- Operationalize Gemini Government and Google Codemender or equivalent directly inside active workflows, showing security analysts and application developers how to leverage generative AI to automate log parsing, threat hunting, and source-code remediation.
- Engineer automated data pipelines to feed the centralized enterprise platform (incorporating telemetry from Tenable.io, Google Mandiant ASM, Microsoft Azure Arc, Splunk, and Google SecOps) to maintain a single, authoritative pane of glass.
- Ensure all AI-assisted capabilities comply strictly with privacy, data classification, and logging safeguards, preventing non-public vulnerability metrics from leaking into unvetted environments.
Governance Safeguards & Escalation Automation
- Build automated low-code workflows to manage the SI-2 time-bound exception lifecycle, ensuring every granted exception maps back to a named owner, specific compensating controls, and an explicit financial tiedown capturing technical debt.
- Configure automated alert thresholds and workflow routing for significant business risks that exceed normal management tolerance, ensuring rapid escalation in line with the SI-2 update.
Qualifications
The designated expert must demonstrate a unique blend of strategic advisory presence and deep, practical engineering capability. Must be able to demonstrate prior experience doing the following in a large/complex environment:
- Proven experience serving as a trusted technical advisor to CISOs, CIOs, or senior executive leaders within public sector or heavily federated enterprise environments.
- Documented success as a technical mentor, trainer, or engineering lead focused on pair-engineering and technical upskilling of infrastructure and security operations staff.
- Comprehensive expertise operationalizing security controls, including tiering models, compensating control validation, and time bound risk governance structures.
- Enterprise cyber stack Google Threat Intel or VirusTotal, Google SecOps, Mandiant ASM, Tenable.io, Microsoft Azure Arc, GitHub, GitHub Advanced Security, Ansible Tower, and Gemini/Anthropic AI security frameworks.
- Cloud Architecture & DevSecOps Engineering
Nice To Have Skills
- Federated/Government environment
- Tech Stack to include: Google, Microsoft, AWS, Splunk
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
[email protected].
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.