Senior Product Security Assurance Analyst (term-limited)

Sound Transit•Seattle, WA

110d•$81,000 - $180,000•Hybrid

About The Position

Under general direction, the Security Assurance Analyst supports operations of Sound Transit’s Information Security program for technology assets. The role helps safeguard digital assets through system audits, vulnerability management, security control configuration management, and other assurance activities to ensure major systems and applications comply with internal security controls and industry requirements. It requires technical expertise, critical thinking, and collaboration across teams. This is a term-limited position of five years. The work is performed in a hybrid environment, with an expectation of working in the office at least three days per week.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a closely related field, or an equivalent combination of education and experience.
Five years of general information technology experience focused on IT Security, Risk Management, Data Protection, or Compliance, or an equivalent combination of education and experience.
Hold at least one valid, current certification: CISA, CISSP, CompTIA Security+, a relevant GIAC certification, CCOA, or Associate of (ISC)2.
Strong command of and familiarity with modern security technologies, including SIEM, SOAR, EDR, vulnerability scanning, PIM, PAM, certificate management, and DLP.
Strong understanding of information security assurance.
Understanding and functional command of security controls for financial and business-critical systems.
Familiarity with Microsoft security technologies and products.
Experience with cybersecurity auditing and consulting.
Understanding of Zero Trust architecture and modern security frameworks.
General knowledge of NIST 800-series standards and ISO 27001/2 frameworks.
Working technical knowledge of general IT system architectures, software, hardware, protocols, and standards.
Competency with Microsoft Office applications, including Microsoft Project, Word, Excel, PowerPoint, and SharePoint, and general proficiency with software applications.
Ability to work independently and manage multiple priorities.
Effective workload prioritization and self-organization.
Effective project management skills.
Ability to speak about and work with complex graphical interfaces and software; the work may involve talking and seeing.

Nice To Haves

Knowledge of scripting or automation, such as Python or PowerShell.
ITIL certification.
Project Management certification.

Responsibilities

Conduct security reviews of systems and applications to assess compliance with internal requirements and industry standards, including ISO 27001 and NIST.
Support internal and external audits of agency-wide applications by collecting, validating, and organizing compliance evidence.
Lead or manage focused penetration testing, code analysis, and segmentation testing.
Conduct system-specific vulnerability assessments.
Translate agency security policy into actionable product-level requirements.
Support security incident response activities.
Advise on security control requirements for technology implementations.
Manage vulnerability remediation efforts.
Participate in creating and managing information security governance documents, including policies, standards, baselines, guidelines, and procedures.
Review system architecture and design documents for security-by-design principles.
Ensure new applications adhere to secure coding, encryption, and data-handling standards.
Track assurance program metrics and prepare regular reports for stakeholders.
Maintain current knowledge of the IT security industry, security solutions and processes, attacks, and threat vectors.
Help ensure agency technology assets, systems, services, and facilities comply with information security procedures.
Model Sound Transit’s core values and contribute to diversity, equity, and inclusion.
Follow agency safety rules, regulations, and procedures relevant to assigned duties.
Integrate sustainability into everyday business practices.
Perform other duties as assigned.

Benefits

Medical, dental, and vision plans with no-cost employee coverage, with comprehensive benefits also available for eligible dependents.
Long-term disability and life insurance.
Employee Assistance Program.
401a retirement plan with a 12% employer match on a 10% employee contribution.
457b retirement plan with employee contributions up to the IRS maximum.
25 days of annual paid time off, with increases after four, eight, and twelve years of service.
12 paid holidays and up to two paid floating holidays per year.
Up to two paid volunteer days per year.
12 weeks of parental leave for new parents.
Pet insurance.
A no-cost ORCA card for full-time employees.
Tuition reimbursement of up to $5,000 annually for approved expenses.
Inclusive reproductive health support services.
Professional development opportunities.
Work-life balance and colleague recognition.