Information Security Engineer/Analyst I

Port of Seattle • Seattle, WA

4d

About The Position

As an Information Security Engineer/Analyst I, you will identify, analyze, and mitigate security threats to the Port's networks, systems, and data. You will minimize the risk of cyber attacks and ensure compliance with regulations and industry standards. You will create and facilitate end user training content related to information security and cybersecurity to diverse audiences. You will use security tools to support programs’ core functions and key responsibilities. You will contribute to efforts to assess, influence, recommend, deploy, and integrate cybersecurity solutions. You will contribute to the cybersecurity portions of project implementations including vulnerability scanning and third-party security testing reports. You will assist the Internal Audit team members with keeping up to date on the latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices. You will assist in the detection and incident response of cybersecurity events and identify potential and active risks to systems and data. You will assist in the development and maintenance of Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation.

Requirements

• One (1) year of experience in Information Technology and/or Security.
• Strong analytical skills and can use critical thinking, logic, and reasoning to evaluate strengths and weaknesses to identify the most appropriate solution.
• Ability to monitor security controls and policies that are aligned with compliance and regulatory framework requirements such as Criminal Justice Information Services (CJIS), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI-DSS), Federal Information Security Modernization Act (FISMA), and General Data Protection Regulation (GDPR), as well as the requirements for securing sensitive data.
• Ability to communicate, both orally and in writing, technical concepts effectively with technical and non-technical stakeholders.
• Ability to monitor the effectiveness of risk management principles, including identifying, assessing, and prioritizing risks, developing and implementing risk mitigation strategies, and monitoring and evaluating risk over time at an individual risk level.

Nice To Haves

• CompTIA Security+
• (ISC)² Certified in Cybersecurity (CC)
• SANS GIAC Security Essentials Certification (GSEC)

Responsibilities

• Identify, analyze, and mitigate security threats to the Port's networks, systems, and data.
• Minimize the risk of cyber attacks and ensure compliance with regulations and industry standards.
• Create and facilitate end user training content related to information security and cybersecurity to diverse audiences.
• Use security tools to support programs’ core functions and key responsibilities.
• Contribute to efforts to assess, influence, recommend, deploy, and integrate cybersecurity solutions.
• Contribute to the cybersecurity portions of project implementations including vulnerability scanning and third-party security testing reports.
• Assist the Internal Audit team members with keeping up to date on the latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices.
• Assist in the detection and incident response of cybersecurity events and identify potential and active risks to systems and data.
• Assist in the development and maintenance of Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation.

What This Job Offers

• Career Level: Entry Level
• Education Level: No Education Listed