IT Security & Compliance Specialist II

Health & Human Services; United States; Hybrid; USD 88,000 - 117,000; Full time

Job summary

North Carolina Department of Health and Human Services (DHHS) Information Technology Division seeks an IT Security & Compliance Specialist II (NS) in Raleigh for application security testing across the development lifecycle. You will perform deep security assessments, collaborate with development teams, and help implement secure coding practices from design to deployment.

The role emphasizes hands-on vulnerability analysis of NC DHHS applications and APIs, including web, mobile, and backend

Qualifications

• Application Security Penetration tester identifies, analyzes, and mitigates vulnerabilities in software applications and APIs.
• Collaborates with development/infrastructure teams to integrate secure coding practices.
• Performs deep, manual and automated security assessments of NCDHHS applications across web apps, APIs, and mobile platforms.

Responsibilities

• Perform deep, manual and automated security assessments of NCDHHS applications.
• Chain vulnerabilities, bypass controls, and emulate real adversary behavior across web apps, APIs, and mobile platforms.

Skills

Application security

Penetration testing

Vulnerability assessment

Security testing

Education

Bachelor's degree in computer science or a related IT field

Associate degree in computer science or a related IT field

Job description

Agency Division Job Classification Title IT Security & Compliance Specialist II (NS) Position Number Grade DT10

About Us

North Carolina State Government is one of the state’s largest employers, with over 76,000 employees all working toward a common goal: a safer and stronger North Carolina. We are a large organization comprised of various agencies, offices, and universities, each providing important public services. Eligible state employees are entitled to comprehensive benefits, including a variety of leave options, professional development opportunities, insurance, and more. To learn more about the benefits of being a North Carolina state employee, visit the N.C. Office of State Human Resources' website. Permanent, temporary, and time-limited state government jobs can be found from the mountains to the coast. Find your next opportunity today!

Description of Work

The Application Security Penetration tester is responsible for identifying, analyzing, and mitigating vulnerabilities in software applications and APIs throughout the development lifecycle. This role collaborates closely with development and infrastructure teams to integrate secure coding practices and ensure the security of application from design through deployment. The Application Penetration Tester is responsible to perform deep, manual and automated security assessments of NCDHHS applications. This role goes Beyond automated scanning- you will chain vulnerabilities, bypass controls, and emulate real adversary behavior across web apps, APIs, and mobile platforms.

Salary and Compensation

Salary Grade Range: $87,617.00 - $117,000.00 Recruitment Range: $87,617.00 - $117,000.00

Posting Information

The Posting Will Close At 11:59 P.M. The Night Before The End Date This Position Is Funded In Part Through Federal Funds. This Role Is Eligible To Be Hybrid And Requires Onsite Reporting Located Within Raleigh, NC

Information Technology Division

About the NC DHHS Information Technology Division: In collaboration with our partners, the North Carolina Department of Health and Human Services (DHHS) protects the health and safety of all North Carolinians and provides essential health and human services. The IT division (ITD) is one of the divisions that report to the Operational Excellence portfolio. The ITD division comprises four sections: Implementation and Operations, Strategy and Workforce, Enterprise Technology, and Vendor and Finance. ITD offers the following services but not limited to implementations, operations, project/portfolio management, infrastructure, consulting, business division liaison, digital transformation, IT strategy, enterprise technology, IT contract and vendor management, and data office services.

Compensation and Benefits

The State of North Carolina offers excellent comprehensive benefits. Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis). Employees also receive paid vacation, sick, and community service leave. In addition, paid parental leave is available to eligible employees. Visit the website for State Benefits.

Equal Opportunity Statement

The North Carolina Department of Health and Human Services (DHHS) is an Equal Opportunity Employer that embraces an Employment First philosophy, which consists of complying with all federal laws, state laws, and Executive Orders. We are committed to reviewing requests for reasonable accommodation at any time during the hiring process or while on the job. For more information about DHHS: https://www.ncdhhs.gov/. DHHS uses the Merit-Based Recruitment and Selection Plan to fill positions subject to the State Human Resources Act with the most qualified individuals. Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position. In accordance with the Governor’s Executive Order 303, our agency supports second-chance employment for individuals who were previously incarcerated or justice-involved.

Eligibility and Background Checks

Applicants may be subject to a criminal background check. All candidates selected for positions considered “Positions of Trust” will be subject to a criminal background check.

Veterans & National Guard Preference

• Veterans’ and National Guard Preference Applicants seeking Veteran's Preference must attach a DD-214 Member-4 Form (Certificate of Release or Discharge from Active Duty) to their applications.
• Applicants seeking National Guard Preference must attach an NGB 23A (RPAS), along with the state application, if they are a current member of the NC National Guard in good standing.
• Applicants who are former members of either the NC Army National Guard or the NC Air National Guard, with honorable discharge and six years of creditable service, must attach a copy of the DD 256 or NGB 22, along with the state application.

ADA Accommodations

Consistent with the Americans with Disabilities Act (ADA) and the Pregnant Workers Fairness Act (PWFA), DHHS is committed to the full inclusion of all qualified individuals. As part of this commitment, DHHS will ensure that people with disabilities, or known limitations covered by the PWFA, are provided with reasonable accommodation. If reasonable accommodation is needed to participate in the job application or interview process, please contact the person indicated below.

Contact Information

CONTACT INFORMATION: If there are any questions about this posting, please contact Talent Acquisition at [e-mail]. Resumes will not be accepted in lieu of completing this application.

Minimum Education and Experience

• Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; OR Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area; OR An equivalent combination of education and experience.

EEO Statement

The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.

State Application Resources / Frequently Asked Questions

Valuing Education and Experience The State of North Carolina values the knowledge and experience of our jobseekers and current state employees. Approximately 91 percent of state job classifications allow experience to be substituted for education or do not require a post‑secondary degree. Learn more about how you may qualify for a position through education or directly related experience, or a combination of both, with the Education and Experience Equivalency Guide. All job postings close at 11:59pm the night before the End Date.