IT Security Engineer

King County•Chinook Building 401 5th Avenue Seattle, WA

1d•Hybrid

About The Position

The King County Information Technology (KCIT) Security and Privacy team is hiring an IT Security Engineer to work alongside Security Analysts, Engineers, and Architects. The role manages and deploys security controls, services, and technologies used to identify, protect against, detect, and respond to threats that could affect the delivery of King County services. The engineer evaluates telemetry, hunts for threats, troubleshoots security technology issues, responds to incidents, and manages service requests from County departments. The position also contributes to the cohesiveness and performance of security technology platforms, processes, and procedures, including developing and deploying automation to improve detection, response, and service provisioning. This position is open only to current King County employees. KCIT uses a hybrid work model, with a mix of office work and telecommuting that may change based on business needs. The primary onsite location is the Chinook Building in Seattle, Washington. Employees must reside in Washington State within a reasonable distance of their King County worksite, and must maintain a reliable home workspace and internet connection. The normal workweek is Monday through Friday, 8:00 a.m. to 5:00 p.m.; alternative schedules may be considered by the manager. The employee participates in a rotating 24/7 After-Hours Support rotation across a pool of 12 to 15 staff. The role is FLSA exempt and is represented by Protec17: Information Technology.

Requirements

At least two years of experience in IT security and/or identity engineering or a relevant field.
At least two years of experience in IT service desk operations and/or general IT support.
Demonstrated knowledge of information security principles and best practices.
Knowledge of computer networking concepts and protocols, and network security methodologies.
Demonstrated knowledge and experience in broad technology areas, including Active Directory, Windows Server, Windows Desktop, Linux, encryption, access control, and endpoint protection.
Demonstrated knowledge and experience in one or more programming or scripting languages, such as PowerShell, Python, JavaScript, or C#.
Demonstrated knowledge and experience querying and analyzing log data.
Knowledge and ability to keep abreast of emerging information technology and security technologies.
Knowledge of information classification concepts and procedures for information compromise.
Strong time-management and organizational skills.
Must be a current King County employee.
Must reside in Washington State within a reasonable distance of the King County worksite.
Must maintain a home workspace with reliable internet access and be available and responsive during scheduled work hours.
Must participate in the After-Hours Support rotation.

Nice To Haves

SANS GIAC certifications.
CCNA/CCNP Security certifications.
Advanced Enterprise Technology certifications.
Advanced Cloud Technology certifications.
Other relevant certifications.

Responsibilities

Monitor security technologies, service and incident queues, and telemetry.
Respond to security and identity alerts, events, and incidents.
Conduct proactive threat hunting to identify and remediate vulnerable technologies, applications, and configurations.
Triage and respond to security incidents independently and/or in a group setting.
Provision security and identity services and provide level 1 break/fix support for King County security platforms and services.
Manage operational performance, monitoring, and documentation for assigned security technologies and services.
Assist with onboarding and offboarding security and identity technologies and services.
Maintain the cohesiveness and performance of operational platform processes and procedures.
Work with the Security Operations Manager and Security Architecture to identify and implement automation strategies that improve operational performance and integrate technologies for service provisioning and detection/response.
Create and maintain technical documentation, troubleshooting guides, and standard operating procedures for security and security-related technologies.
Serve as an escalation point for tier 1 and 2 security-related help requests.
Develop or improve technical solutions and tools, and automate repeatable tasks.
Provide backup support for investigations and vulnerability management.
Participate in the After-Hours Support rotation.
Perform other duties as assigned.