IT Security Analyst - Journey (Lacey)

State of Washington; Lacey (WA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Washington State Parks and Recreation Commission seeks an IT Security Analyst – Journey to protect systems and data across WA Parks. This hands-on security role focuses on vulnerability management, disaster recovery, secure configurations, and incident response support.

You will engage with IT teams to design and maintain security controls and policies. The ideal candidate will contribute to enterprise cybersecurity, participate in SOC and SDR processes, and help ensure policy compliance across

Qualifications

• Six (6) years of IT security analysis or related experience.
• Or a Bachelor's degree plus two years of IT security experience.

Responsibilities

• Monitors, maintains, and configures systems related to risk, threat, and vulnerability management.
• Uses threat and vulnerability management tools to remediate vulnerabilities and plan action items.
• Monitors SIEM solutions and creates custom queries and alerts.
• Assesses agency systems for IT security policy compliance and recommends remediations.
• Provides technical review in Security Design Review processes for systems, apps, IoT, and IT solutions.

Skills

Communication Skills

Customer Focus

Interpersonal Skills

Problem Solving

Organizing

Education

Bachelor's degree in computer science or MIS

Job description

Washington State Parks and Recreation Commission

___________________________

Job Title: IT Security Analyst – Journey

Location: Lacey, WA

Closes: October 26th, 2026, at 11:55pm PDT

Position: after onboarding and training this position is available for remote/partial telework/flexible schedule, some travel may occasionally be required. The default assigned work location of all Parks positions – both on-site and telework eligible positions – is within the State of Washington. Frequency of onsite work will vary based on business and operational needs

Washington State Parks is looking for a full time IT Security Analyst- Journey (ISA) to join our team and play a critical role to help protect the systems, data, and technology services that support WA Parks mission, staff, and residents across the State.

This position is part of PARKS Information Security Office (ISO) within IT Services Department and reports to the Chief Information Security Officer (CISO). The role supports enterprise cybersecurity operations with a focus on vulnerability management, disaster recovery, secure system configuration, incident response support, and security‑driven technical administration. This is a hands‑on technical security position.

The position acts as the point of contact for both technical and process related security design, implementation, configuration, and support to other IT professionals and engineers in relation to systems and network defense. The ISA works closely with the Senior Specialist to implement, design, and maintain solutions and systems that meet the needs and requirements of the Parks overall IT Security Posture. Leveraging guidance from the Senior Analyst and IT Architect this position will ensure policy and procedural compliance with both State level and Parks organizational IT security policy.

The successful candidate will work closely with IT operations, network infrastructure, compliance, and agency staff to identify risks, improve security posture, and support reliable technology services across Parks Enterprise. Join us and be part of an exciting, fast‑paced team dedicated to protecting vital systems that make a difference in Washington!

Duties include but are not limited to:

• Monitors, maintains, and configures systems related to risk, threat, and vulnerability management.
• Uses threat & vulnerability management tools to identify and remediate vulnerability from Parks infrastructure, often working with other teams and technical staff to develop plans of action to remediate the concerns in a timely fashion.
• Monitors Security Information and Event Management (SIEM) solutions, creating custom queries and alerts.
• Conducts assessments on agency systems ensuring compliance with overall IT security policy and identifies configuration changes that will improve security posture. Providing recommendations for remediation of findings.
• Provides technical resources and knowledge to internal and external Security Design Review (SDR) processes for systems, applications, IOT devices, and IT business solutions. Working under the guidance of the Senior Analyst to complete the required documentation and approval gates by using established SDR processes and tools established by OCS and Parks IT security Policy.
• Maintains ongoing and updated knowledge of current and emerging IT & Cyber Security policy and standards that have or will have a potential to impact Parks systems and business practices.
• Acts a subject matter expert and key resource for efforts to create baseline security standards and baselines for IT hardware & software, IOT devices, network & mobile devices, and cloud‑based solutions.
• Attends and actively participate in WaTech Security Operations Center (SOC), Office of Cyber Security (OCS), WaTech Risk and Policy Office team meetings, representing Parks interests.
• Provides technical review during intake, assessment and review of mobile applications for security concerns and viability of use in compliance with current policies and standards.
• Regularly participates in security exercises that evaluate the effectiveness of the Agency’s Disaster Recover Plan (DR), Business Continuity Plan(BCP), Continuity of Operations Plan (COOP), and Incident Response plan (IR).

REQUIRED QUALIFICATIONS:

Option #1

Six (6) years of consultative, administrative, or supervisory experience in information technology security analysis, information security system implementations, and security application configuration and maintenance.

OR

Option #2

Bachelor’s degree in computer science, management information systems, or closely related field AND (2) two years of experience in consultative, administrative, or supervisory experience in information technology security.

DESIREDQUALIFICATIONS:

• At least one of the following professional certifications: CISSP, CCSP, CRISC, GSEC, CEH, or Security+.
• At least (3) three years' experience developing, implementing, and enforcing agency information systems security policy, operating procedures, and technical standards.
• (3) three years' experience in designing and applying security controls and processes for securing the organization/agency.
• At least (2) two years' experience in identifying and resolving information security risks and incidents that may adversely impact agency operations or projects.
• At least (2) two years' project management experience with an emphasis in information technology or IT security.
• Additionally, the candidate will be measured against the following experience and ability (experience in at least half):
• Systems / Network security.
• Web Application & development security.
• Risk Management
• Network discovery and vulnerability assessments.
• Malware analysis.
• Compliance audits.
• Log management.
• Ability to identify and document security vulnerabilities and their potential business impact.
• Implementing and monitoring security controls
• Ability to identify and document security vulnerabilities and their potential business impact.
• Implementing and monitoring security controls.
• Experience managing IT security in 3rd party cloud environments.
• Experience with Compliance management, specifically NIST, CJIS, PCI, and OCIO 141.10.
• Experience managing and maintaining security controls in Azure.

Core Competencies:

Communication Skills: Clearly and effectively conveys and/or presents information verbally; summarizes what was heard to mitigate miscommunication; Shares ideas and perspectives, and encourages others to do the same; Informs others involved in a project of new developments; Disseminates information to other employees, as appropriate; Effectively uses multiple channels to communicate important messages; Keeps supervisor well informed about progress and/or problems in a timely manner; Writes in a clear, concise, organized, and convincing way for a variety of target audiences.

Customer Focus: Prioritizes customers (internal and external) and their needs as primary, and is dedicated to meeting their expectations; Develops and maintains customer relationships; builds credibility and trust; Quickly and effectively solves customer problems; Provides prompt, attentive service in a cheerful manner; adapts to changing information, conditions, or challenges with a positive attitude; Incorporates customer feedback into delivery of service to provide the best experience possible for the customer.

Interpersonal Skills:Relates well with others; Treats others with respect; Shares views in a tactful way; Demonstrates diplomacy by approaching others about sensitive issues in non-threatening ways; Considers and responds appropriately to the needs, feelings, and capabilities of others; Fosters an environment conducive to open, transparent communication among all levels and positions; Takes the initiative to get to know internal and external customers.

Problem Solving: Uses rigorous logic and methods to solve difficult problems with effective solutions; Probes all available sources for answers; Can see hidden problems; Is excellent at honest analysis; Looks beyond the obvious and doesn't stop at the first answers.

Organizing: Uses his/her time effectively and efficiently; Concentrates his/her efforts on the more important priorities; Can attend to a broader range of activities as a result of organizing time efficiently; Can gather resources (people, funding, material, support) to get things done; Can orchestrate multiple activities at once to accomplish a goal; Arranges information and files in a useful manner.

Learning and Growth

For information about this position and job duties, please contact James Minkler at [e-mail] or [phone].

For information about the hiring process, please contact Wendy Vandel at [e-mail] or [phone].

All applicants with a legal right to work in the United States are encouraged to apply.

Job Alerts to receive a list of new job postings at Parks.