IT Security Engineer

City of Des Moines; Des Moines (IA); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Residency Incentive Program

Paid Volunteer Time-Off

Parental Leave

Vacation and Sick Leave

12 Paid Holidays

Health/Dental/Life/Long term disabled“

Job summary

City of Des Moines is seeking an IT Security Engineer to monitor, assess and remediate cybersecurity risk across City systems. The role consults with IT and City departments to minimize risk and leads security projects and training.

This position requires designing and maintaining security platforms, responding to incidents, and guiding policy and vendor decisions. Strong technical leadership and 24/7 readiness are essential for City operations.

Qualifications

• Degree or equivalent with years of applied experience in enterprise security systems and security analysis.
• Associates degree plus six years of experience; or bachelor's degree plus four years; or certs plus eight years.

Responsibilities

• Designs, plans, engineers, implements and maintains security platforms, systems, networks, and related hardware/software.
• Monitors, assesses and responds to vulnerabilities, alerts and incidents to maintain 24/7 operations.
• Serves as a subject matter expert and escalation point for security incidents and requests from IT teams.
• Conducts after-action reviews and recommends improvements to security tech and processes.
• Identifies weaknesses and documents mitigation processes, standards and assessments.
• Plans changes, upgrades and new services to ensure secure operation and business continuity.
• Assists with vendor selection, contracts, and evaluation; monitors performance.
• Develops training program priorities and project plans for City cybersecurity.
• Advises on information security policy and regulatory compliance for City departments.

Skills

Security monitoring

Incident response

Threat assessment

Vulnerability management

Technical leadership

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Associates degree in Computer Science / IT / Cybersecurity

SSCP / CCSP / CISSP or SANS certifications

Job description

The IT Security Engineer is responsible for monitoring, assessing and remediation of the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk.

Works closely with the other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to development of policy and training.

The City of Des Moines promotes a healthy work life balance and offers a comprehensive benefits package including:

• Residency Incentive Program
• Paid Volunteer Time-Off
• Parental Leave
• Vacation and Sick Leave
• 12 Paid Holidays
• Health/Dental/Life/Long term disability Insurance
• Wellness Programs and Activities
• Tuition Reimbursement and Continuing Education Programs
• Public Service Student Loan Forgiveness Benefit
• Defined Benefit Pension Plan through IPERS
• Deferred Compensation Plan with City Match up to 2.5%
• Voluntary Insurance Benefit Options
• Employee Discount Program

• Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and
• Four years of applied experience managing enterprise security systems and performing security analysis;

OR

• Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and
• Six years of applied experience managing enterprise security systems and performing security analysis;

OR

• Technical certifications such as SSCP, CCSP, CISSP, or SANS; and
• Eight years of applied experience managing enterprise security systems and performing security analysis.

• Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
• Possession of a valid Iowa driver’s license or evidence of equivalent mobility.

• Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages and documents security platforms, systems, networks, and associated hardware and software related to information security.
• Monitors, assesses and responds to vulnerabilities, alerts and/or security incidents as needed to maintain 24/7 City operations. Stays apprised of and communicates emerging threats.
• Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues or requests from the IT support and administration teams.
• Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes and procedures.
• Identifies potential system or network weaknesses through existing security platforms and security best practices. Creates and documents security engineering and mitigation processes, standards and assessments.
• Plans, coordinates and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
• Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
• Helps create change requests, statements of work, project plans and/or budgets for security upgrades.
• Helps set, implement, and deliver City cybersecurity training program priorities and project plans.
• Advises on information security policy and programming. Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
• Works outside regular business hours when needed for maintenance, project performance, and incidents.
• Performs other related duties as assigned.