IT Security Analyst - Journey (Lacey)

Washington State Department of Transportation; Lacey (WA); Hybrid; USD 86,000 - 115,000; Full time

Benefits offered by this job

Hybrid work option

Remote work flexibility

Travel as needed

Job summary

Washington State Parks and Recreation Commission is seeking an IT Security Analyst – Journey to safeguard enterprise systems, data, and services supporting Parks’ mission across the state. This hands-on security role focuses on vulnerability management, secure configurations, incident response, and policy-driven administration.

The ISA will work with Senior Analyst and IT Architect to ensure policy compliance, design security solutions, and support operations with cross‑team collaboration.

Qualifications

• Six years of IT security analysis or related experience OR
• Bachelor's degree plus two years of IT security experience.

Responsibilities

• Monitor, maintain, and configure risk, threat, and vulnerability management systems.
• Use threat and vulnerability tools to identify and remediate Parks infrastructure issues.
• Monitor SIEM solutions; develop queries and alerts.
• Assess agency systems for compliance with IT security policy; recommend remediations.
• Provide technical review for security design reviews (SDR) and related processes.
• Maintain knowledge of current IT security policy and standards.
• Act as SME for baseline security standards across hardware, software, IoT, and cloud.
• Represent Parks in SOC/OCS meetings and security policy discussions.
• Review mobile apps for security concerns and viability in policy compliance.
• Participate in disaster recovery, business continuity, COOP, and IR exercises.

Skills

Web Application security

Vulnerability management

Security policies

Incident response

Compliance audits

Log management

Azure security

Education

Bachelor's degree in computer science, MIS or related field

Job description

• Web Application & development security.
• Compliance audits.

Salary : $85,800.00 - $115,416.00 Annually

Location : Thurston County - Lacey, WA

Job Type: Full Time - Permanent

Remote Employment: Flexible/Hybrid

Job Number: 2026-08620

Department: Parks and Recreation Commission

Opening Date: 10/13/2026

Closing Date: 10/26/2026 11:55 PM Pacific

Washington State Parks and Recreation Commission

IT Security Analyst - Journey

Lacey, WA

after onboarding and training this position is available for remote/partial telework/flexible schedule, some travel may occasionally be required. The default assigned work location of all Parks positions - both on-site and telework eligible positions - is within the State of Washington. Frequency of onsite work will vary based on business and operational needs

Washington State Parks is looking for a full time IT Security Analyst- Journey (ISA) to join our team and play a critical role to help protect the systems, data, and technology services that support WA Parks mission, staff, and residents across the State.

This position is part of PARKS Information Security Office (ISO) within IT Services Department and reports to the Chief Information Security Officer (CISO). The role supports enterprise cybersecurity operations with a focus on vulnerability management, disaster recovery, secure system configuration, incident response support, and security-driven technical administration. This is a hands‑on technical security position.

The position acts as the point of contact for both technical and process related security design, implementation, configuration, and support to other IT professionals and engineers in relation to systems and network defense. The ISA works closely with the Senior Specialist to implement, design, and maintain solutions and systems that meet the needs and requirements of the Parks overall IT Security Posture. Leveraging guidance from the Senior Analyst and IT Architect this position will ensure policy and procedural compliance with both State level and Parks organizational IT security policy.

The successful candidate will work closely with IT operations, network infrastructure, compliance, and agency staff to identify risks, improve security posture, and support reliable technology services across Parks Enterprise. Join us and be part of an exciting, fast‑paced team dedicated to protecting vital systems that make a difference in Washington!

Duties

• Monitors, maintains, and configures systems related to risk, threat, and vulnerability management.
• Uses threat & vulnerability management tools to identify and remediate vulnerability from Parks infrastructure, often working with other teams and technical staff to develop plans of action to remediate the concerns in a timely fashion.
• Monitors Security Information and Event Management (SIEM) solutions, creating custom queries and alerts.
• Conducts assessments on agency systems ensuring compliance with overall IT security policy and identifies configuration changes that will improve security posture. Providing recommendations for remediation of findings.
• Provides technical resources and knowledge to internal and external Security Design Review (SDR) processes for systems, applications, IOT devices, and IT business solutions. Working under the guidance of the Senior Analyst to complete the required documentation and approval gates by using established SDR processes and tools established by OCS and Parks IT security Policy.
• Maintains ongoing and updated knowledge of current and emerging IT & Cyber Security policy and standards that have or will have a potential to impact Parks systems and business practices.
• Acts a subject matter expert and key resource for efforts to create baseline security standards and baselines for IT hardware & software, IOT devices, network & mobile devices, and cloud-based solutions.
• Attends and actively participate in WaTech Security Operations Center (SOC), Office of Cyber Security (OCS), WaTech Risk and Policy Office team meetings, representing Parks interests.
• Provides technical review during intake, assessment and review of mobile applications for security concerns and viability of use in compliance with current policies and standards.
• Regularly participates in security exercises that evaluate the effectiveness of the Agency's Disaster Recover Plan (DR), Business Continuity Plan(BCP), Continuity of Operations Plan (COOP), and Incident Response plan (IR).

Qualifications

REQUIRED QUALIFICATIONS:

Option #1

Six (6) years of consultative, administrative, or supervisory experience in information technology security analysis, information security system implementations, and security application configuration and maintenance.

OR

Option #2

Bachelor's degree in computer science, management information systems, or closely related field AND (2) two years of experience in consultative, administrative, or supervisory experience in information technology security.

Desired Qualifications

• At least one of the following professional certifications: CISSP, CCSP, CRISC, GSEC, CEH, or Security+.
• At least (3) three years' experience developing, implementing, and enforcing agency information systems security policy, operating procedures, and technical standards.
• (3) three years' experience in designing and applying security controls and processes for securing the organization/agency.
• At least (2) two years' experience in identifying and resolving information security risks and incidents that may adversely impact agency operations or projects.
• At least (2) two years' project management experience with an emphasis in information technology or IT security.
• Additionally, the candidate will be measured against the following experience and ability (experience in at least half):

• Systems / Network security.
• Web Application & development security.
• Risk Management
• Network discovery and vulnerability assessments.
• Malware analysis.
• Compliance audits.
• Log management.
• Ability to identify and document security vulnerabilities and their potential business impact.
• Implementing and monitoring security controls

• Ability to identify and document security vulnerabilities and their potential business impact.
• Implementing and monitoring security controls.
• Experience managing IT security in 3rd party cloud environments.
• Experience with Compliance management, specifically NIST, CJIS, PCI, and OCIO 141.10.
• Experience managing and maintaining security controls in Azure.

Core Competencies

Communication Skills: Clearly and effectively conveys and/or presents information verbally; summarizes what was heard to mitigate miscommunication; Shares ideas and perspectives, and encourages others to do the same; Informs others involved in a project of new developments; Disseminates information to other employees, as appropriate; Effectively uses multiple channels to communicate important messages; Keeps supervisor well informed about progress and/or problems in a timely manner; Writes in a clear, concise, organized, and convincing way for a variety of target audiences.

Customer Focus: Prioritizes customers (internal and external) and their needs as primary, and is dedicated to meeting their expectations; Develops and maintains customer relationships; builds credibility and trust; Quickly and effectively solves customer problems; Provides prompt, attentive service in a cheerful manner; adapts to changing information, conditions, or challenges with a positive attitude; Incorporates customer feedback into delivery of service to provide the best experience possible for the customer.

Interpersonal Skills: Relates well with others; Treats others with respect; Shares views in a tactful way; Demonstrates diplomacy by approaching others about sensitive issues in non‑threatening ways; Considers and responds appropriately to the needs, feelings, and capabilities of others; Fosters an environment conducive to open, transparent communication among all levels and positions; Takes the initiative to get to know internal and external customers.

Problem Solving: Uses rigorous logic and methods to solve difficult problems with effective solutions; Probes all available sources for answers; Can see hidden problems; Is excellent at honest analysis; Looks beyond the obvious and doesn't stop at the first answers.

Organizing: Uses his/her time effectively and efficiently; Concentrates his/her efforts on the more important priorities; Can attend to a broader range of activities as a result of organizing time efficiently; Can gather resources (people, funding, material, support) to get things done; Can orchestrate multiple activities at once to accomplish a goal; Arranges information and files in a useful manner.

Diversity Policy Statement

The Washington State Parks and Recreation Commission is an equal opportunity employer. We strive to build a workplace culture that is welcoming and inclusive in which all employees feel respected and empowered to bring their unique ideas to the agency. At State Parks, we believe that embracing diverse backgrounds and experiences is essential to growing a strong workforce. We encourage applicants underrepresented in natural resources and outdoor recreation fields to apply, including but not limited to women, Black, Indigenous and people of color (BIPOC), individuals with disabilities, neurodivergent individuals, disabled and Vietnam era veterans, persons over 40 years of age, and individuals who identify as a part of the 2SLGBTQ+ community.

Persons desiring any accommodations in the application process or this job announcement in an alternative format may contact the human resources office at . Applicants who are deaf or hearing impaired may call through the Washington Relay Service by dialing 7-1-1 or 1-.

For information about this position and job duties, please contact James Minkler at [e-mail] or .

All applicants with a legal right to work in the United States are encouraged to apply.

More than Just a Paycheck!

Employee benefits are not just about the kind of services you get, they are also about how much you may have to pay out of pocket. Washington State offers one of the most competitive benefits packages in the nation.

We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. That's why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs.

Insurance Benefits

Employees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state.

Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax‑deferred dollars toward their health‑care expenses. Employees are also covered by basic life and long‑term disability insurance, with the option to purchase additional coverage amounts.

To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs.

Dependent care assistance allows the employee to save pre‑tax dollars for a child or elder care expenses.

Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction.

The Washington State Employee Assistance Program promotes the health and well‑being of employees.

Retirement And Deferred Compensation

State Employees are members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems' web site.

Employees also have the ability to participate in the Deferred Compensation Program (DCP). This is a supplemental retirement savings program (similar to an IRA) that allows you control over the amount of pre‑tax salary dollars you defer as well as the flexibility to choose between multiple investment options.

Social Security

All state employees are covered by the federal Social Security and Medicare systems. The state and the employee pay an equal amount into the system.

Public Service Loan Forgiveness

If you are employed by a government or not‑for‑profit organization, and meet the qualifying criteria, you may be eligible to receive student loan forgiveness under the Public Service Loan Forgiveness Program.

Holidays

Full‑time and part‑time employees are entitled to paid holidays and one paid personal holiday per calendar year.

Note: Employees who are members of certain Unions may be entitled to additional personal leave day(s), please refer to position specific Collective Bargaining Agreements for more information.

Full‑time employees who work full monthly schedules qualify for holiday compensation if they are employed before the holiday and are in pay status for at least 80 non‑overtime hours during the month of the holiday; or for the entire work shift preceding the holiday.

Part‑time employees who are in pay status during the month of the holiday qualify for the holiday on a pro‑rata basis. Compensation for holidays (including personal holiday) will be proportionate to the number of hours in pay status in the month to that required for full‑time employment, excluding all holiday hours. Pay status includes hours worked and time on paid leave.

Sick Leave

Full‑time employees earn eight hours of sick leave per month. Overtime eligible employees who are in pay status for less than 80 hours per month, earn a monthly proportionate to the number of hours in pay status, in the month to that required for full‑time employment. Overtime exempt employees who are in pay status for less than 80 hours per month do not earn a monthly accrual of sick leave.

Sick leave accruals for part‑time employees will be proportionate to the number of hours in pay status, in the month to that required for full‑time employment. Pay status includes hours worked, time on paid leave and paid holiday.

Vacation (Annual Leave)

Full‑time employees accrue vacation leave at the rates specified in (1) or the applicable collective bargaining agreement (CBA). Full‑time employees who are in pay status for less than 80 non‑overtime hours in a month do not earn a monthly accrual of vacation leave.

Part‑time employees accrue vacation leave hours in accordance with (1) or the applicable collective bargaining agreement (CBA) on a pro‑rata basis. Vacation leave accrual will be proportionate to the number of hours in pay status, in the month to that required for full‑time employment.

Pay status includes hours worked, time on paid leave and paid holiday.

Military Leave

Washington State supports members of the armed forces with 21 days paid military leave per year.

Bereavement Leave

Most employees whose family member or household member dies, or for loss of pregnancy, are entitled to five (5) days of paid bereavement leave. In addition, the employer may approve other available leave types for the purpose of bereavement leave.

Additional Leave

Leave Sharing

Family and Medical Leave Act (FMLA)

Leave Without Pay

Please visit the State HR Website for more detailed information regarding benefits.