Information Security Engineer

This positionoperateson a hybrid schedule of 40 hours per week. The role is primarily remote with one scheduled in-office day per week andadditionalon-site work as needed.

COMPENSATION:

HiringRange:$118000-$122000 USD Annually

Compensation will bedeterminedbased on educationexperienceand skills.

BENEFITS:

Jefferson County offers a generous benefits package that supports your personal and professional life. Benefits include medical dental and vision insurance; paid time off and holidays including astarting bank of 40 hours of PTO for new hires; retirement matching; wellness programs; tuition reimbursement; flexible schedules;remotework options; and more. For more information clickherefor our Total Rewards summary.

ESSENTIAL DUTIES:

Performsall duties of a cybersecurity analyst:

• Provides cybersecurity support identification analysis issue resolution and implementation and integration of cybersecurity solutions

• Monitors and evaluates security alerts and analyzes security data toidentifypotential threats and vulnerabilities

• Assistsin conducting routine vulnerability assessments and penetration testing

• Assistsin incident identification analysis and containment andthedevelopment maintenance and implementation of cybersecurity incident response plans

• Participatesin the configuration and maintenance of security tools

• Recommendsconfiguration changes and standards to improve security posture

• Assistswith required auditing and assessment functions andin creating and updating security documentation and reports

• Assistswith providing security awareness training

• Compiles metrics for information security to allow for trending toassistin reviews of current processesidentifyawareness needs andfacilitatemeasurement for continuous improvement

• Collaborateswith senior security team members on various projects

• Keepscurrent on security technology and security news

• Servesas a primary escalation point during incidents to both aide in mitigation and containment as well as offer strategic insight and recommendations to strengthen incident response protocols and prevent reoccurrence

• Researches designs and implements cyber security solutions for organization systems and products thatcomply withall applicable security policiesstandards and regulations (e.g. PCI CJIS HIPAA)

• Works with IT and internal and external business partners to perform in-depth security assessments and risk analyses to ensure that security is factored in the evaluation selection installation and configuration process of hardware andsoftware.

• Collaborates with software development teams to ensure secure coding practices are followed.

• Providessupport for user access management and account provisioning.

• Analyzes and makes recommendations to improve networksystemand application architectures.

• Examines network server and application logs todeterminetrends andidentifysecurity incidents.

• Assistsin the review and update of cyber security policiesarchitecturesand standards.

• Assistsin responding to audits penetrationtestsand vulnerability assessments.

• Mentorsand providesguidance to junior team members.

• Researchesemerging security technologiesthreatsvulnerabilitiesregulatory changesand industrytrends andbest practicestoensure compliance and proactive security measures.

• Other duties as assigned.

QUALIFICATIONS:

Research shows that women and other underrepresented and historically marginalized groups tend to apply only when they check every box in the posting. If you are reading this and hesitating to click apply for that reason we encourage you to go for it! A true passion and excitement for making an impact is just as important as work experience.

Minimum Qualifications:

• Experience:At leastthree (3) yearsof professional hands-on experience designing implementing supporting or securing IT systems networks applications or cloud environments. Preferred qualifications include five (5) to seven (7) years of relevant experience.

• Education:Bachelors degree inComputerScience Information Technology Cybersecurity or a related field.

• License/Certifications:OSCP OSEP GIAC CSECCISSPCISMCIPMor equivalent preferred

*Note: An equivalent combination of education and experience is acceptable

Preferred knowledgeskillsand abilities:

Technical Skillset:

• Broad operating system knowledge Windows (workstation and Server) Linux mobile operating systems.
• Strongsecurityknowledgeto includefirewallIDS/IPSweb serversecuritywireless securitycloudOT and cryptography.
• Experiencedesigning implementing integrating andmaintainingenterprise cybersecurity technologies including Active EDR SIEM database security and vulnerability management.
• Proficiencyinat least onescriptinglanguage (e.g.PythonPowerShell)for automation and security monitoring.
• Experiencedesigning implementing andmaintainingsecurity automation solutions using scripting APIs workflow automation and orchestration tools to improve operational efficiency and strengthen cybersecurity operations.
• Understanding of cybersecurity frameworks and standards such as NIST CIS and ISO 27001.
• Familiarity with compliance regulations relevant to government entities (CJIS HIPAA PCI PII).
• Strong knowledge of ITIL or equivalentmethodology.

Soft Skillset:

• Strong decision-making capabilities with a proven ability to weigh the relative costs and benefits of potential actions andidentifythe mostappropriate one.
• Strong problem-solving and trouble-shooting skills.
• Day-to-day general management of cybersecurity.
• Strong customer service skills in various formats and settings.
• Professional verbal and written communication in presentations written communication and oral discussion. Ability to clearly communicate complex technical concepts to both technical and non-technical audiences and adjust communication from executives to end users.
• Exceptional interpersonal skills with the ability to collaborate effectively with other team members ofdifferent backgroundsand levels of experience.
• Proven ability to create business casesmake recommendations and deliver projects.
• Ability to hit the ground running and move from high-level goals to tactical roadmaps.
• Possess a growth mindset andability to consistentlydemonstratea positive demeanor goodattitudeand behavior in the workplace.
• Self-motivated andpossessingof a high sense of urgency and personal integrity.
• Highest ethical standards and values.

Additional Job Information:

• A valid Colorado drivers license is required for positions that drive on County Business in either a county or personal vehicle within30-daysof hire or beginning to serve as an intern or volunteer.

• Offer of employment is contingent upon successful completion ofcriminal history motor vehicle report education verification and/or referencesfor all positions.

Accommodations Statement:We encourage people with disabilities to apply and are committed to providing reasonable accommodations throughout our hiring process. Forassistancewith applications interviews or other hiring-related accommodations contact. This contact is for accommodation requests only and cannot provide application status updates.

Qualified applicants are encouraged to apply.

All applicants mustsubmitan online employment application by 11:59PM on the posted cut-off date. Follow this link to apply now:Jefferson County Colorado Career Opportunities

• A resume and cover lettersubmittedwith your application is encouraged but will not substitute for the information requested on the application.

• Current Jefferson County employees must apply through their employee profile in Workday.

• In any materials yousubmit you may redact or remove age-identifying information such as age date of birth or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Applications are reviewed for minimum qualifications listed in the qualifications section of the job bulletin and applicants are contacted directly by the hiring team if selected. To view the status of your application please log into yourcandidate portal.