Information Security Engineer

Seattle Public Schools • John Stanford Center for Educational Excellence, WA

2d

About The Position

This position is responsible, under general direction, for helping plan and carry out the organization's information security strategy and recommend security enhancements to management with the goal of protecting computer systems and networks. As sensitive data is more frequently stored on computer systems, and hacking and cyber-attacks grow more frequent, the organization relies on the Cyber Security Team to develop strategies to prevent, detect, respond to, and recover from Cyber Security incidents.

Requirements

• Knowledge of different frameworks such as NIST SP-800 (or NIST CSF) and the MITRE ATT&CK Framework
• Knowledge of disaster recovery strategies
• Knowledge of computer forensic tools
• Knowledge of the CIA Triad, including its meaning and application through security controls
• Knowledge of the difference between Administrative, Technical, and Compensating controls
• Knowledge of risk assessment/management tools, technologies and methods
• Experience with anti-virus software, intrusion detection, firewalls
• Experience with content filtering
• Knowledge of digital forensic tools
• Analyzing and documenting existing security controls and reviewing and updating related documentation
• Analyze security systems/controls and seek improvements on a continuous basis
• Evidence and chain-of-custody experience
• An understanding of best practices and how to implement them at an enterprise level
• Help educate the workforce on common threats through cyber security training and awareness
• Critical thinking skills and the ability to solve problems as they arise
• Planning, researching and developing security policies, standards and procedures
• Experience with scripting (PowerShell, Bash, Python, etc.)
• Ability to prioritize projects
• Able to work in a fast-paced environment
• Ability to communicate effectively, both verbally and in writing, to diverse audiences
• Ability to create complete, concise, and cogent forensic reports
• Ability to communicate security issues to peers and management
• Bachelor’s degree in computer science, information technology, business administration, or related field. Equivalent work experience may substitute for the education requirement on a year-for-year basis.
• 2 years of experience in a related field, with last one year in information security.

Nice To Haves

• Holding one of the following professional certifications is desired: CISSP CISM GSEC CEH Security+

Responsibilities

• Assist with cybersecurity tickets and requests submitted through the ticketing system.
• Monitor, tune, and respond to alerts triggered by security systems
• Assist in performing forensic reviews using Microsoft/Office 365 tools and log aggregators
• Monitor, review patching activities, and perform vulnerability scans
• Develop standards, procedures, and playbooks for common cybersecurity workflows, leveraging a defense-in-depth methodology
• Identify cost-effective solutions to cybersecurity challenges and actively follow cybersecurity professionals' blogs and industry news to stay informed of emerging threats and security strategies

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level