Cyber Security Engineer II

Salt Lake County•Salt Lake City, UT

12d•Hybrid

About The Position

Salt Lake County is seeking a Cyber Security Engineer II to join their team. This role is responsible for the design, development, implementation, monitoring, and maintenance of enterprise-wide cyber security programs to protect the confidentiality, integrity, and availability of all County systems and resources. The position operates under the direction of the Cyber Security Manager and involves collaboration with various IT teams and county departments. The culture at Salt Lake County emphasizes a strong work-life balance, community service, and employee well-being, supported by comprehensive benefits and a hybrid work environment.

Requirements

Bachelor’s degree from an accredited college or university in Information Technology or closely related field, plus four (4) years of related experience; OR an equivalent combination of eight (8) years of related education and experience.
Knowledge of security concepts, principles, and best practices for voice and data networks; applications and architecture; design and testing; hosting and cloud-based services; Internet/Intranet technology and mobile devices.
Knowledge of information security architecture, technologies, tools, practices, and controls.
Knowledge of operations, services, concepts, terms, and activities common to a comprehensive, state-of-the-art information systems security program and current regulatory requirements.
Knowledge of current and emerging security technologies including but not limited to Firewalls, Remote Access Methods, Email Security, Encryption Methods, Vulnerability Management, Traffic Management, Security Event Information Management, Endpoint Detection and Response, Identity and Access Management.
Understanding PCI-DSS, HIPAA, and CJIS compliance requirements and how to protect PII.
Knowledge of methods and techniques for evaluating information security and developing appropriate resolutions.
Ability to communicate effectively both verbally and in writing.
Ability to think logically and systematically; solve complex problems; apply general principles to specific conditions effectively.
Ability to facilitate projects and meetings as assigned, comfortable working with all levels of the organization.
Ability to analyze business and technical processes and determine ways of making them more efficient.
Ability to remain calm under stress and can quickly adjust, evolve and multi-task between several competing priorities at once.
Ability to maintain confidentiality and professionalism.
Ability to work independently or as part of a larger security team.
Must be legally authorized to work in the United States.
Must not require current or future employment visa sponsorship.

Nice To Haves

Professional certifications related to information security or computer networking are preferred.
Due to the nature of this position, the successful applicant must pass a required pre-employment background check and subsequent mandatory background checks in accordance with current County Human Resources policy requirements.
Due to the nature of this position, the successful applicant must pass a required background check through fingerprinting and enrollment in the continuous RAP Back (Record of Arrest and Prosecution Back) program in accordance with current County Human Resources policy requirements.

Responsibilities

Complies with and promotes all IT security policies, processes, procedures, and best practices.
Acts in an advisory role to other teams both internal to IT and throughout the county.
Deploys and integrates IT security and privacy-related programs designed to protect the County’s systems, applications, and data.
Identifies and communicates security issues and their impact on the IT organization and the County and assists with executing successful solutions while tracking and achieving measurable results.
Establishes and maintains positive business relationships with users countywide to actively market and educate them on the importance of security cooperation and compliance.
Deploys, as instructed, the Information Security plans and short-term and long-term strategies for the IT organization and the County.
Documents processes and monitors systems that report on the effectiveness of systems and controls necessary to protect the County’s information technology systems, assets, and interests.
Monitors compliance with the organization's information security policies and procedures among employees, contractors, partners, and other third parties and resolves potential issues as needed.
Assists with information security risk assessments.
Responds to information security incidents and follow up to ensure that proper protection and corrective measures have been successfully taken.
Performs and participates in forensic investigations and audits as required.
Design, develop, and implement security controls for payment card data systems.
Implements a cloud security strategy to protect County IT systems and data in PaaS, SaaS, and laaS environments.
Embraces managed security service options as they are considered.
Stays current with technical knowledge in information systems, security and privacy technologies, best practices, and use of appropriate security controls and methods.
Maintains certifications as specified by the Associate Division Director, Cyber Security.

Benefits

12 Holidays
up to 24 vacation days
12 sick days
one personal day every year
Retirement options for hybrid pension/401(k) or 401(k) only with a 10% contribution
Medical coverage including a 100% county paid premium option
Dental and Vision coverage including coverage for adult designees
Health Savings account with a county contribution up to $1200/year
Flexible Spending Account
100% county-paid Long-Term Disability and Short-Term Disability option
Professional Development
Onsite medical clinic
childcare
gym
hospital insurance
pet insurance
auto and home insurance
discounts at County facilities