Job Description

Posting number: 27661

Department: Information Security

Job classification: Information Security Engineer

Posting type: Open & Promotional

Categories: IT and Computers

Summary

This position is responsible, under general direction, for helping plan and carry out the organization's information security strategy and recommend security enhancements to management with the goal of protecting computer systems and networks. As sensitive data is more frequently stored on computer systems, and hacking and cyber-attacks grow more frequent, the organization relies on the Cyber Security Team to develop strategies to prevent, detect, respond to, and recover from Cyber Security incidents.

Examples of duties

% of Time

Description of Essential Function and Desired Outcome

35

Assist with cybersecurity tickets and requests submitted through the ticketing system.

20

Monitor, tune, and respond to alerts triggered by security systems

20

Assist in performing forensic reviews using Microsoft/Office 365 tools and log aggregators

10

Monitor, review patching activities, and perform vulnerability scans

10

Develop standards, procedures, and playbooks for common cybersecurity workflows, leveraging a defense-in-depth methodology

5

Identify cost-effective solutions to cybersecurity challenges and actively follow cybersecurity professionals' blogs and industry news to stay informed of emerging threats and security strategies

OTHER FUNCTIONS:

• May perform related duties consistent with the scope and intent of the position.

RELEVANT COMPETENCIES:

Competency

Definition

Behavioral Indicators

Technical Learning

Quickly learns and integrates new technical skills and knowledge; seeks out avenues to enhance technical knowledge.

• Picks up and integrates technical skills quickly.
• Recognizes trends and effectively prepares for changes.
• Seeks out opportunities to advance one’s learning in relevant technical disciplines.

Time Management

Uses his or her time effectively and efficiently; concentrates his or her efforts on the most important priorities; adeptly handles several tasks at once.

• Focuses his/her efforts on the most important priorities.
• Uses time effectively and efficiently.
• Handles multiple-tasks effectively and efficiently.
• Values other people’s time.

Interpersonal Skills

Is warm and easy to approach; builds constructive and effective relationships; uses diplomacy and tact to diffuse tense situations; has a style and charm that immediately puts others at ease and disarms hostility.

• Relates well with others
• Builds constructive and effective relationships.
• Considers and responds appropriately to the needs and feelings of different situations.
• Is tactful, diplomatic and demonstrates consistency and fairness.

Functional/Technical Skills

Possesses required functional and technical knowledge and skills to do his or her job at a high level of accomplishment; demonstrates active interest and ability to enhance and apply new functional skills.

• Understands the technical aspects of the job and keeps up-to-date on key technical or functional aspects of the job.
• Applies appropriate technical/functional knowledge to address situations in a timely manner.
• Thinks of ways to apply new developments to improve organizational performance.
• Shares expertise and skills with others when appropriate.

DISTRICT-WIDE CORE COMPETENCIES:

Competency

Definition

Behavioral Indicators

Collaboration

Develops cooperation and teamwork while participating in a group, working toward solutions which generally benefit all involved parties.

• Is seen as a team player who encourages efficient and effective collaborations.
• Works skillfully in difficult situations with both internal and external groups.
• Represents his/her own interests while being open-minded to other groups.
• Builds respectful and productive relationships internally and externally.

Getting Results (Action Oriented)

Performs work with energy and drive; values planning, but will take quick, decisive action when an opportunity presents itself.

• Demonstrates a strong sense of urgency about solving problems and getting work done.
• Focuses on achieving the goal even in the face of obstacles.
• Assumes responsibility for starting and finishing work with minimal supervision.
• Strives for new levels of performance.

Decision Quality & Problem Solving

Uses analysis, wisdom, experience and logical methods to make good decisions and solve difficult problems with effective solutions; appropriately incorporates multiple inputs to establish shared ownership and effective action.

• Weighs the consequences of options before making a decision.
• Applies appropriate criteria to situations for the purpose of making decisions.
• Displays self-confidence in own judgment.
• Focuses on facts and solutions rather than opinions and problems.

Integrity

Is widely trusted; is seen as a direct, truthful individual; presents truthful information in an appropriate and helpful manner; keeps confidences; admits mistakes; doesn’t misrepresent him/herself for personal gain.

• Deals with people and situations in an honest and forthright manner.
• Represents information and data accurately and completely.
• Represents the confidentiality of information and concerns shared by others.
• Takes ownership if a mistake is their own and does not blame others.

Accountability

Holds self and others accountable for measurable high-quality, timely and cost-effective results; determines objectives, sets priorities and delegates work; accepts responsibility for mistakes; complies with established control systems and rules.

• Takes responsibility and action as if the risks (financial or otherwise) are his or her own.
• Holds individuals and teams accountable for their actions and results.
• Initiates action even if outcome is uncertain and is willing to accept the consequences of failure.
• Aligns own activities and priorities to meet broader organizational needs.
• Demonstrates courage and confidence in his or her own ability.

KNOWLEDGE, SKILLS AND ABILITIES:

Knowledge

• Knowledge of different frameworks such as NIST SP-800 (or NIST CSF) and the MITRE ATT&CK Framework
• Knowledge of disaster recovery strategies
• Knowledge of computer forensic tools
• Knowledge of the CIA Triad, including its meaning and application through security controls
• Knowledge of the difference between Administrative, Technical, and Compensating controls
• Knowledge of risk assessment/management tools, technologies and methods
• Experience with anti-virus software, intrusion detection, firewalls
• Experience with content filtering
• Knowledge of digital forensic tools

Skills

• Analyzing and documenting existing security controls and reviewing and updating related documentation
• Analyze security systems/controls and seek improvements on a continuous basis
• Evidence and chain-of-custody experience
• An understanding of best practices and how to implement them at an enterprise level
• Help educate the workforce on common threats through cyber security training and awareness
• Critical thinking skills and the ability to solve problems as they arise
• Planning, researching and developing security policies, standards and procedures
• Experience with scripting (PowerShell, Bash, Python, etc.)

Abilities

• Ability to prioritize projects
• Able to work in a fast-paced environment
• Ability to communicate effectively, both verbally and in writing, to diverse audiences
• Ability to create complete, concise, and cogent forensic reports
• Ability to communicate security issues to peers and management

Qualifications

EDUCATION/EXPERIENCE:

A typical way to obtain the knowledge and abilities would be:

Bachelor’s degree in computer science, information technology, business administration, or related field.

Equivalent work experience may substitute for the education requirement on a year-for-year basis.

(2) years of experience in a related field, with last one (1) year in information security.

DESIRED CERTIFICATION & LICENSES

Valid Washington State Driver's License or evidence of equivalent mobility.

Holding one of the following professional certifications is desired:

• CISSP
• CISM
• GSEC
• CEH
• Security+

CLEARANCES:

Criminal Justice fingerprint and background check.