IT Security Engineer

City of Des Moines•Des Moines, IA

2d•Onsite

About The Position

The IT Security Engineer is responsible for monitoring, assessing, and remediating the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk. Works closely with other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection, and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to the development of policy and training.

Requirements

Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and Four years of applied experience managing enterprise security systems and performing security analysis; OR Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and Six years of applied experience managing enterprise security systems and performing security analysis; OR Technical certifications such as SSCP, CCSP, CISSP, or SANS; and Eight years of applied experience managing enterprise security systems and performing security analysis.
Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
Possession of a valid Iowa driver’s license or evidence of equivalent mobility.
Applicants who possess an out-of-state driver's license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline.

Responsibilities

Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages, and documents security platforms, systems, networks, and associated hardware and software related to information security.
Monitors, assesses, and responds to vulnerabilities, alerts, and/or security incidents as needed to maintain 24/7 City operations.
Stays apprised of and communicates emerging threats.
Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues, or requests from the IT support and administration teams.
Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes, and procedures.
Identifies potential system or network weaknesses through existing security platforms and security best practices.
Creates and documents security engineering and mitigation processes, standards, and assessments.
Plans, coordinates, and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
Helps create change requests, statements of work, project plans, and/or budgets for security upgrades.
Helps set, implement, and deliver City cybersecurity training program priorities and project plans.
Advises on information security policy and programming.
Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
Works outside regular business hours when needed for maintenance, project performance, and incidents.
Performs other related duties as assigned.