IT Security Specialist 1 (Cybersecurity Specialist - PCN 168007M)

State of Alaska • Statewide, AK

7d • Remote

About The Position

This Individual Position is Exempt from the Hiring Freeze. Qualified Applicants are Encouraged To Apply. Welcome to the Department of Health! We’d be delighted to have you join our team. If you envision yourself in this role and are ready to start an exciting career with us, apply today! This position is open to Alaskan Residents only. Please check out the residency definition to determine if you qualify. This position is currently located in Anchorage and Haines. The position may be filled statewide, depending upon the location of the most qualified candidate.

In this role, you will support the department’s information security program by performing hands-on assessments of systems, networks, and applications to identify vulnerabilities and verify security control implementation. Additionally, they will facilitate secure code reviews, analyze security logs, coordinate penetration testing activities, and assist technical teams in applying remediation measures to strengthen system defenses. Their work will ensure compliance with required security and privacy frameworks such as HIPAA, HITECH, APIPA, IRS Pub 1075, PCI-DSS, and CJIS while helping maintain the confidentiality, integrity, and availability of departmental data. The position also supports continuous monitoring efforts, triages alerts, and supports incident investigations through evidence gathering and documentation. Through these activities, the successful applicant will contribute to the department’s overall information assurance posture by applying established methods and tools to protect systems and ensure secure operations.

The Department of Health’s core mission is to “Promote and protect the health and well-being of Alaskans.” As a member of the Department Security Office (DSO), your goal will be to work through the Department CISO to enable the Department to make informed decisions on the risks associated with the systems it employs. We strive to thoroughly assess each system that the Department engages, to ensure we can critically assess any associated risks and remediate those risks, where possible. To that same mission, we continually engage with peer agencies to monitor and remediate any security events or vulnerabilities that are identified, maintain currency in the security space, and protect the health and privacy data of the citizens of this great state.

Requirements

• Training in computer science, information systems, information assurance, cybersecurity, or a similar field and professional Information Technology experience.
• Must work from within Alaska.
• Reliable internet connection required for Telework.
• Pass a fingerprinted background check.
• Within 6 months of appointment, must be able to obtain ecfirst’s Certified HIPAA Professional (CHP) certification (DOH paid).

Nice To Haves

• Integrity/Honesty: Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics.
• Reasoning: Identifies rules, principles, or relationships that explain facts, data, or other information; analyzes information and makes correct inferences or draws accurate conclusions.
• Technical Expertise: Effectively applies technical knowledge to solve a range of problems; develops technical solutions to new or highly complex problems that cannot be solved using existing methods or approaches; is sought out as an expert to provide advice or solutions in the technical area.
• Some or all of the following position-specific competencies: Computer Network Defense, Information Assurance, Information Systems/Network Security, Systems Testing and Evaluation, Web Technology.
• Specific information security certifications such as Certified Information Systems Security Professional (CISSP) or Security+ may be required for some positions.

Responsibilities

• Perform hands-on assessments of systems, networks, and applications to identify vulnerabilities and verify security control implementation.
• Facilitate secure code reviews.
• Analyze security logs.
• Coordinate penetration testing activities.
• Assist technical teams in applying remediation measures to strengthen system defenses.
• Ensure compliance with required security and privacy frameworks such as HIPAA, HITECH, APIPA, IRS Pub 1075, PCI-DSS, and CJIS.
• Maintain the confidentiality, integrity, and availability of departmental data.
• Support continuous monitoring efforts.
• Triage alerts.
• Support incident investigations through evidence gathering and documentation.
• Contribute to the department’s overall information assurance posture by applying established methods and tools to protect systems and ensure secure operations.

Benefits

• Option of telecommuting
• Flexible working hours
• Training mechanisms and coursework to ensure team members can build knowledge sets in all facets of information technology.
• DOH paid Certified HIPAA Professional (CHP) certification.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed