Information Security Engineer/Analyst I

Port of Seattle•SeaTac, WA

4d•Hybrid

About The Position

As an Information Security Engineer/Analyst I, you will identify, analyze, and mitigate security threats to the Port's networks, systems, and data. You will minimize the risk of cyber attacks and ensure compliance with regulations and industry standards. You will create and facilitate end user training content related to information security and cybersecurity to diverse audiences. You will use security tools to support programs’ core functions and key responsibilities. You will contribute to efforts to assess, influence, recommend, deploy, and integrate cybersecurity solutions. You will contribute to the cybersecurity portions of project implementations including vulnerability scanning and third-party security testing reports. You will assist the Internal Audit team members with keeping up to date on the latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices. You will assist in the detection and incident response of cybersecurity events and identify potential and active risks to systems and data. You will assist in the development and maintenance of Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation.

Requirements

One (1) year of experience in Information Technology and/or Security.
Strong analytical skills and can use critical thinking, logic, and reasoning to evaluate strengths and weaknesses to identify the most appropriate solution.
Ability to monitor security controls and policies that are aligned with compliance and regulatory framework requirements such as Criminal Justice Information Services (CJIS), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI-DSS), Federal Information Security Modernization Act (FISMA), and General Data Protection Regulation (GDPR), as well as the requirements for securing sensitive data.
Ability to communicate, both orally and in writing, technical concepts effectively with technical and non-technical stakeholders.
Ability to monitor the effectiveness of risk management principles, including identifying, assessing, and prioritizing risks, developing and implementing risk mitigation strategies, and monitoring and evaluating risk over time at an individual risk level.
Must pass a Transportation Security Administration (TSA) background check as well as a criminal history background check with the Federal Bureau of Investigation (FBI).
Must pass a Criminal Justice Information Services (CJIS) criminal history background check.
Employees must establish a residence in Washington state within 30 days of their first day of employment and must maintain a residence in Washington State during their employment with the Port of Seattle.
If a position is eligible to telework, work performed while teleworking must be performed in Washington State.

Nice To Haves

CompTIA Security+
(ISC)² Certified in Cybersecurity (CC)
SANS GIAC Security Essentials Certification (GSEC)

Responsibilities

Identify, analyze, and mitigate security threats to the Port's networks, systems, and data.
Minimize the risk of cyber attacks and ensure compliance with regulations and industry standards.
Create and facilitate end user training content related to information security and cybersecurity to diverse audiences.
Use security tools to support programs’ core functions and key responsibilities.
Contribute to efforts to assess, influence, recommend, deploy, and integrate cybersecurity solutions.
Contribute to the cybersecurity portions of project implementations including vulnerability scanning and third-party security testing reports.
Assist the Internal Audit team members with keeping up to date on the latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices.
Assist in the detection and incident response of cybersecurity events and identify potential and active risks to systems and data.
Assist in the development and maintenance of Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation.