Information Security Supervisor - SAUS

State of Minnesota; Saint Paul (MN); Hybrid; USD 84,000 - 144,000; Full time

Job summary

State of Minnesota seeks an Information Security Supervisor to lead the Web Application Firewall and application security programs. You will direct a team delivering enterprise-grade security controls across the state’s web apps, while also contributing hands-on when needed.

You will guide statewide security practices, mentor staff, and partner with developers and security professionals to identify and remediate vulnerabilities, aligning with enterprise policies and statewide mission.

Qualifications

• Minimum of three (3) years of IT experience in information security, cybersecurity, application security, vulnerability management, or a closely related field.
• Experience with web application security and WAF technologies.
• Experience with application security, vulnerability scanning, and remediation.
• Knowledge of enterprise networking and security technologies.
• Experience with OWASP frameworks and secure application development practices.
• Experience managing security projects, vendors, or technology solutions.
• Demonstrated ability to communicate clearly and effectively to foster mutual understanding and guide teams through change.

Responsibilities

• Lead MNIT's Web Application Firewall and Application Security programs.
• Direct a team responsible for implementing, configuring, monitoring, and optimizing WAF services.
• Provide hands-on configuration, troubleshooting, tuning, and incident response during high-priority security events.
• Guide statewide application security practices and mentor staff.
• Collaborate with MNIT security professionals, development teams, and business partners to identify vulnerabilities and remediation strategies.
• Ensure capabilities are integrated, governed, and maintained to support secure development across the enterprise.

Skills

WAF technologies

Application security

Vulnerability scanning

OWASP

Security project management

Communication

Leadership

Vendor management

Mentoring team

Tools

WAF platforms

DAST tools

SAST tools

Job description

Working Title: Information Security Supervisor

Job Class: Systems Analysis Unit Supervisor

Agency: Minnesota IT Services

• Job ID : 97386
• Location : St. Paul #LI-Hybrid
• Telework Eligible : Yes
• Full/Part Time : Full-Time
• Regular/Temporary : Unlimited
• Who May Apply : Open to all qualified job seekers
• Date Posted : 10/03/2026
• Closing Date : 10/14//2026
• Hiring Agency/Seniority Unit : Minnesota IT Services
• Division/Unit : Enterprise Security
• Work Shift/Work Hours : Day Shift
• Days of Work : Monday - Friday
• Travel Required : No
• Salary Range: $40.01 - $69.11 / hourly; $83,540 - $144,301 / annually
• Job Class Option : Information Security
• Classified Status : Classified
• Bargaining Unit/Union : 216 - Middle Management Association/MMA
• FLSA Status : Exempt - Executive
• Designated in Connect 700 Program for Applicants with Disabilities (https://mn.gov/mmb/careers/diverse-workforce/people-with-disabilities/connect700/) : Yes

The work you'll do is more than just a job.

At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities.

Join the 2,800+ professionals of Minnesota IT Services (https://mn.gov/mnit/about-mnit/careers/) (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.

The Information Security Supervisor serves as the strategic and operational leader for MNIT's Web Application Firewall (WAF) and Application Security programs, ensuring robust, enterprise-wide protection of State of Minnesota web applications. The position is accountable for the delivery, governance, and continuous maturation of an enterprise-grade WAF platform supporting agencies across the state. This includes directing a team responsible for implementing, configuring, monitoring, and optimizing WAF services to maintain consistent and effective security controls in complex, multi-environment settings.

This is a working supervisor role. In addition to providing leadership, the supervisor is expected to demonstrate strong technical competency and engage directly in hands‑on operational work when necessary, including configuration, troubleshooting, tuning, and response during high-priority security events. The supervisor is recognized as an enterprise application security subject matter expert, bringing deep expertise to guide decisions, mentor staff, and shape statewide application security practices.

The position also helps lead and support MNIT’s Application Security program. The team manages statewide application security scanning platforms, including dynamic application security testing (DAST) and static code analysis tools. The supervisor ensures these capabilities are effectively integrated, governed, and maintained to support secure development across the enterprise. The team provides advanced consulting and advisory services to MNIT security professionals, application development teams, and business partners—enabling them to identify vulnerabilities, understand remediation strategies, and adopt secure coding and deployment practices that protect state assets.

Through effective leadership, strategic vision, technical acumen, and collaborative engagement, the Information Security Supervisor ensures MNIT’s application security capabilities are resilient, efficient, and aligned with enterprise security policies, supporting the State of Minnesota’s mission to safeguard systems, services, and data.

This position requires an employee to work onsite at 600 Robert St. N., Minnesota at least 50% of the time, with limited telework available. Telework eligibility depends on residence:

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.

Minimum Qualifications

To qualify, candidates must clearly show all of the following qualifications in their resume. Resume tips available here (https://mn.gov/mnit/about-mnit/careers/hiringprocess.jsp) :

Position requires a minimum of three (3) years of IT experience in IT experience in information security, cybersecurity, application security, vulnerability management, web application security, or a closely related field.

• Experience with web application security and WAF technologies.
• Experience with application security, vulnerability scanning, and remediation.
• Knowledge of enterprise networking and security technologies.
• Experience with OWASP frameworks and secure application development practices.
• Experience managing security projects, vendors, or technology solutions.
• Demonstrated ability to communicate clearly and effectively to foster mutual understanding and guide teams through change.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving, with demonstrated leadership and people engagement skills that support positive user experiences and high-performing teams.

Preferred Qualifications

• Proven leadership experience supervising technical security teams, ideally within a large enterprise or government environment.
• Advanced knowledge of web application security principles, secure development practices, and modern threat landscapes.
• Hands-on experience implementing and managing enterprise class Web Application Firewalls (WAFs) or similar enterprise security controls.
• Proficiency with application security testing platforms, including dynamic application security testing (DAST) and static application security testing (SAST) tools.
• Understanding of modern application architectures (e.g., APIs, cloud-native applications, microservices) and their associated security considerations.
• Ability to communicate complex technical concepts to diverse audiences, including executives, technical teams, and non-technical stakeholders.
• Proven ability to foster team development by promoting collaboration, trust, and knowledge sharing, while empowering individuals to achieve collective goals.

Additional Requirements

It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

• SEMA4 Records Check (applies to current and past state employees only)
• Criminal History Check
• Reference Check
• Social Security and Address Verification
• Education Verification
• CJIS Background Check
• Driver's License Record Check
• Other legally required checks

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.

AN EQUAL OPPORTUNITY EMPLOYER

Minnesota State Colleges and Universities is an Equal Opportunity employer/educator committed to the principles of diversity. We prohibit discrimination against qualified individuals based on their race, sex, color, creed, religion, age, national origin, disability, protected veteran status, marital status, status with regard to public assistance, sexual orientation, gender identity, gender expression, or membership in a local commission as defined by law. As an affirmative action employer, we actively seek and encourage applications from women, minorities, persons with disabilities, and individuals with protected veteran status.

Reasonable accommodations will be made to all qualified applicants with disabilities. If you are an individual with a disability who needs assistance or cannot access the online job application system, please contact the job information line at 651-259-3637 or email [e-mail] . Please indicate what assistance is needed.