IT Security Engineer

Cybersecurity Jobs; Des Moines (IA); On-site; USD 110,000 - 134,000; Full time

Benefits offered by this job

Residency Incentive Program

Paid Volunteer Time-Off

Parental Leave

Vacation and Sick Leave

12 Paid Holidays

Health/Dental/Life/ LTD Insurance

Wellness Programs

Job summary

The City of Des Moines in Des Moines, IA seeks an IT Security Engineer to monitor, assess, and remediate cybersecurity risk across the City’s external and internal environments. This onsite role supports the City Information Security Program with security engineering, incident support, platform management, and policy/training contributions.

The position requires a degree in Computer Science, 4+ years of security experience, and certifications such as SSCP, CCSP, CISSP, or SANS.

Qualifications

• Bachelor's degree in Computer Science or related field required.
• Minimum 4 years of enterprise security experience.
• Certifications: SSCP, CCSP, CISSP, or SANS.

Responsibilities

• Monitor, assess, and respond to vulnerabilities, alerts, and security incidents.
• Design, engineer, implement, configure, troubleshoot, and document security platforms and networks.
• Provide technical leadership for security incidents and IT requests.
• Develop and refine security engineering standards and procedures.
• Plan changes, upgrades, and new services to ensure secure operations.
• Assist with vendor evaluation, security contracts, and project budgets.

Education

Bachelor's degree in Computer Science

Associate’s degree in CS/IT-related field

Tools

SSCP

CCSP

CISSP

SANS

Job description

The City of Des Moines, IA seeks an IT Security Engineer to monitor, assess, and remediate cybersecurity risk across the City’s external and internal environments. This onsite position supports the City Information Security Program through security engineering, incident support, platform management, and contributions to policy and training.

Responsibilities

• Monitor, assess, and respond to vulnerabilities, alerts, and security incidents as needed to help maintain 24/7 City operations.
• Stay current on emerging threats and communicate relevant updates to appropriate stakeholders.
• Design, plan, engineer, implement, configure, troubleshoot, monitor, test, maintain, secure, manage, and document security platforms, systems, networks, and related information security hardware and software.
• Serve as a subject matter expert and escalation point, providing technical leadership for security incidents, issues, and requests from IT support and administration teams.
• Conduct after-action reviews, perform research, and provide recommendations to assess, improve, and deploy security technology solutions, processes, and procedures.
• Identify potential system or network weaknesses by leveraging existing security platforms and security best practices.
• Create and document security engineering and mitigation processes, standards, and assessments.
• Plan, coordinate, and test changes, upgrades, and new services to support secure operation in current and future environments, including business continuity and redundancy.
• Assist with selection and evaluation of security vendors and contracts, and monitor vendor performance.
• Support the development of change requests, statements of work, project plans, and/or budgets for security upgrades.
• Help set, implement, and deliver City cybersecurity training program priorities and project plans.
• Advise on information security policy and programming.
• Complete thorough reviews and implement required modifications to support security governance, regulation, and compliance for City departments and partners under the City Information Security Program.
• Collaborate with IT team members, internal and external customers, and vendor partners to perform cybersecurity threat monitoring, prevention, detection, and response.
• Work outside regular business hours when needed for maintenance, project performance, and incident support.
• Perform other related duties as assigned.

Security Platforms and Technology Focus

The Security Engineer will use and maintain existing City security platforms and recommend new platforms to mitigate threats.

Required Qualifications

• Must pass a post-employment background check, physical examination, and drug screen.
• Must possess a valid Iowa driver’s license or provide evidence of equivalent mobility.
• Applicants with an out-of-state driver’s license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline.

Education and Experience

• Graduation from an accredited four-year college or university with a degree in or major course work in Computer Science.
• Minimum of 4 years of applied experience managing enterprise security systems and performing security analysis.
• Technical certifications such as SSCP, CCSP, CISSP, or SANS.

Acceptable Additional Experience and Training (as listed)

• Associate’s degree in Computer Science, Information Technology, Cybersecurity, or related field; plus 6 years of applied experience managing enterprise security systems and performing security analysis.
• Additional pathways listed may include 8 years of applied experience managing enterprise security systems and performing security analysis.

Technologies

SSCP, CCSP, CISSP, SANS

Compensation and Location

• Location: Des Moines, IA (onsite)
• Salary: USD 110,489 - 134,076 per year

Benefits

• Residency Incentive Program
• Paid Volunteer Time-Off
• Parental Leave
• Vacation and Sick Leave
• 12 Paid Holidays
• Health/Dental/Life/Long term disability Insurance
• Wellness Programs and Activities
• Tuition Reimbursement and Continuing Education Programs
• Public Service Student Loan Forgiveness Benefit
• Defined Benefit Pension Plan through IPERS
• Deferred Compensation Plan with City Match up to 2.5%
• Voluntary Insurance Benefit Options
• Employee Discount Program

General Statement of Duties

The IT Security Engineer monitors, assesses, and remediates the City’s external and internal cybersecurity risk. The role provides subject matter expertise to consult with IT and City departments on cybersecurity practices to minimize risk, and supports the evolving needs of the City Information Security Program through security projects and upgrades, security event response, maintenance of security protocols and platforms, technical issue diagnosis, technical solutions for City departments and critical facilities, and contributions to policy and training.