IT Security Engineer

City of Des Moines, IA; Des Moines (IA); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Residency Incentive Program

Paid Volunteer Time-Off

Parental Leave

Vacation and Sick Leave

Health/Dental/Life Insurance

Tuition Reimbursement

Employee Discount Program

Job summary

The City of Des Moines, IA is seeking an IT Security Engineer to manage cybersecurity risks and implement security measures. This role requires strong experience in security system management and a technical background in cybersecurity.

Responsibilities include monitoring vulnerabilities, consulting across departments, and leading technical security projects. The position offers a healthy work-life balance, with a robust benefits package including health insurance, paid leave, and a pension plan.

Qualifications

• Minimum of four years' experience managing enterprise security systems.
• Strong background in security analysis and incident response.
• Technical certifications can substitute for some years of experience.

Responsibilities

• Monitor and assess cybersecurity risk for the City.
• Consult with other departments on cybersecurity practices.
• Design and implement security systems and documentation.
• Respond to vulnerabilities and security incidents.
• Conduct after-action reviews and recommendations.

Skills

Cybersecurity Management

Security System Analysis

Technical Leadership

Incident Response

Vulnerability Assessment

Education

Bachelor's in Computer Science or related field

Associates in Computer Science or related field

Technical certifications (SSCP, CCSP, CISSP, SANS)

Tools

Security Platforms

Network Monitoring Tools

Job description

The IT Security Engineer is responsible for monitoring, assessing and remediation of the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk.

Works closely with the other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to development of policy and training.

The City of Des Moines promotes a healthy work life balance and offers a comprehensive benefits package including:

• Residency Incentive Program
• Paid Volunteer Time-Off
• Parental Leave
• Vacation and Sick Leave
• 12 Paid Holidays
• Health/Dental/Life/Long term disability Insurance
• Wellness Programs and Activities
• Tuition Reimbursement and Continuing Education Programs
• Public Service Student Loan Forgiveness Benefit
• Defined Benefit Pension Plan through IPERS
• Deferred Compensation Plan with City Match up to 2.5%
• Voluntary Insurance Benefit Options
• Employee Discount Program

College transcripts and/or technical certifications, if applicable, need to be submitted to the City of Des Moines Human Resources Department by the application deadline to receive credit.

Qualifications

• Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and
• Four years of applied experience managing enterprise security systems and performing security analysis;

OR

• Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and
• Six years of applied experience managing enterprise security systems and performing security analysis;

OR

• Technical certifications such as SSCP, CCSP, CISSP, or SANS; and
• Eight years of applied experience managing enterprise security systems and performing security analysis.

• Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
• Possession of a valid Iowa driver’s license or evidence of equivalent mobility.

Applicants who possess an out-of-state driver's license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline.

• Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages and documents security platforms, systems, networks, and associated hardware and software related to information security.
• Monitors, assesses and responds to vulnerabilities, alerts and/or security incidents as needed to maintain 24/7 City operations. Stays apprised of and communicates emerging threats.
• Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues or requests from the IT support and administration teams.
• Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes and procedures.
• Identifies potential system or network weaknesses through existing security platforms and security best practices. Creates and documents security engineering and mitigation processes, standards and assessments.
• Plans, coordinates and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
• Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
• Helps create change requests, statements of work, project plans and/or budgets for security upgrades.
• Helps set, implement, and deliver City cybersecurity training program priorities and project plans.
• Advises on information security policy and programming. Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
• Works outside regular business hours when needed for maintenance, project performance, and incidents.
• Performs other related duties as assigned.