Information Security Supervisor

Minnesota IT Services; Saint Paul (MN); On-site; USD 90,000 - 140,000; Full time

Job summary

Minnesota IT Services (MNIT) seeks an Information Security Supervisor to lead the Web Application Firewall and Application Security programs, protecting State of Minnesota web apps enterprise-wide. This working supervisor role blends leadership with hands-on duties—configuring, tuning, and responding during high-priority events—while guiding statewide secure coding and deployment practices across agencies.

The position requires onsite work at 600 Robert St.

Qualifications

• Minimum of three years of IT experience in information security or related field.
• Experience with web application security and WAF technologies.
• Experience with application security, vulnerability scanning, and remediation.
• Knowledge of enterprise networking and security technologies.
• Experience with OWASP frameworks and secure development practices.
• Experience managing security projects, vendors, or technology solutions.
• Strong communication and leadership abilities.

Responsibilities

• Lead WAF and application security programs enterprise-wide.
• Direct a team for implementing, configuring, monitoring, and optimizing WAF services.
• Provide hands-on support during high-priority security events.
• Mentor staff and guide statewide application security practices.
• Coordinate security scanning platforms (DAST, SCA) integration and governance.
• Deliver advisory services to security professionals and development teams.

Skills

Web application security

WAF technologies

Vulnerability scanning

Application security governance

Security project management

Clear communication

Leadership and people engagement

Tools

OWASP frameworks

Job description

Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.

Job Summary

The Information Security Supervisor serves as the strategic and operational leader for MNIT’s Web Application Firewall (WAF) and Application Security programs, ensuring robust, enterprise-wide protection of State of Minnesota web applications. The position is accountable for the delivery, governance, and continuous maturation of an enterprise-grade WAF platform supporting agencies across the state. This includes directing a team responsible for implementing, configuring, monitoring, and optimizing WAF services to maintain consistent and effective security controls in complex, multi-environment settings.

This is a working supervisor role. In addition to providing leadership, the supervisor is expected to demonstrate strong technical competency and engage directly in hands‑on operational work when necessary, including configuration, troubleshooting, tuning, and response during high-priority security events. The supervisor is recognized as an enterprise application security subject matter expert, bringing deep expertise to guide decisions, mentor staff, and shape statewide application security practices.

The position also helps lead and support MNIT’s Application Security program. The team manages statewide application security scanning platforms, including dynamic application security testing (DAST) and static code analysis tools. The supervisor ensures these capabilities are effectively integrated, governed, and maintained to support secure development across the enterprise. The team provides advanced consulting and advisory services to MNIT security professionals, application development teams, and business partners—enabling them to identify vulnerabilities, understand remediation strategies, and adopt secure coding and deployment practices that protect state assets.

Through effective leadership, strategic vision, technical acumen, and collaborative engagement, the Information Security Supervisor ensures MNIT’s application security capabilities are resilient, efficient, and aligned with enterprise security policies, supporting the State of Minnesota’s mission to safeguard systems, services, and data.

This position requires an employee to work onsite at 600 Robert St. N., Minnesota at least 50% of the time, with limited telework available. Telework eligibility depends on residence:

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.

Qualifications

Position requires a minimum of three (3) years of IT experience in IT experience in information security, cybersecurity, application security, vulnerability management, web application security, or a closely related field.

Experience must include:

• Experience with web application security and WAF technologies.
• Experience with application security, vulnerability scanning, and remediation.
• Knowledge of enterprise networking and security technologies.
• Experience with OWASP frameworks and secure application development practices.
• Experience managing security projects, vendors, or technology solutions.
• Demonstrated ability to communicate clearly and effectively to foster mutual understanding and guide teams through change.
• Customer‑focused approach grounded in active listening, empathy, and solution‑oriented problem‑solving, with demonstrated leadership and people engagement skills that support positive user experiences and high‑performing teams.

Additional Requirements

It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

• SEMA4 Records Check (applies to current and past state employees only)
• Criminal History Check
• Reference Check
• Social Security and Address Verification
• CJIS Background Check
• Driver's License Record Check
• Other legally required checks

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.