Senior Cybersecurity Engineer – Security Engineering & Security Operations

City of Tacoma; Tacoma (WA); Hybrid; USD 122,000 - 172,000; Full time

Benefits offered by this job

Flexible hybrid-remote work

Job summary

The City of Tacoma is hiring Senior Cybersecurity Engineers in a hybrid-remote model to protect critical public services. You’ll join either the Security Engineering or Security Operations track, bringing depth in one area and collaboration across both to strengthen the city’s security maturity.

Responsibilities include secure design reviews, threat modeling, SIEM/EDR/SOAR tooling, vulnerability management, and incident response, with mentoring duties and a strong focus on customer service.

Qualifications

• Bachelor’s degree in information technology, cybersecurity or related field.
• Equivalency: 1 year of experience = 1 year of education.
• Minimum 4 years of progressively responsible IT experience related to assignment.
• Security+ or related certification (CISSP, SANS, GIAC, COMTIA).
• As Assigned: Washington State Driver's License; background checks may apply.
• On-call participation is required; ability to obtain CJIS/HIPAA/PCI/NERC CIP access.

Responsibilities

• Design secure systems and threat models; document risk decisions.
• Engineer and deploy cybersecurity tools and controls.
• Maintain secure baselines across OS, cloud, and network.
• Improve vulnerability management with automation.
• Guide and mentor junior analysts in Security Engineering.
• Lead incident response and threat hunting in Security Operations.
• Collaborate with IT and business units; ensure service resilience.

Skills

Secure design review

Threat modeling

SIEM pipelines

Identity security systems

Endpoint protection

Configuration baselines

Vulnerability management

CIS/NIST RMF

Scripting

Education

Bachelor’s degree in information technology or cybersecurity

Tools

SIEM

EDR

SOAR

PowerShell

Python

Job description

Are you passionate about protecting critical public services and the systems that support them? Do you want to join a mission-driven cybersecurity team that values technical excellence, collaboration, and service to the community? If contributing to the security and resilience of a modern city appeals to you, this may be the opportunity you’re looking for.

The City of Tacoma is hiring up to two Senior Cybersecurity Engineers through a single, unified recruitment and interview process. Candidates will be considered for either the Security Engineering track or the Security Operations track based on their strengths, experience, and interests. You do not need to be an expert in both domains; we value depth in one track and collaboration across both. Candidates will not only need to be technically gifted but will require essential skills of communication, collaboration, mentorship, and teamwork.

Senior Cybersecurity Engineers safeguard the technology, information systems, and critical services that keep the City running. These roles strengthen cybersecurity maturity aligned with the Center for Internet Security (CIS) Controls and the NIST Risk Management Framework (RMF) while supporting compliance obligations such as CJIS, HIPAA, PCI DSS, NERC CIP, and applicable RCW requirements.

Working collaboratively with Information Technology teams and business units, these positions enhance cybersecurity visibility, engineer reliable controls, reduce vulnerabilities, manage threats, and ensure the confidentiality, integrity, and availability of City assets.

Key Responsibilities:

Security Engineering Track

• Conduct secure design reviews and threat modeling for new systems and major changes; identify risks, propose controls, and document decisions.
• Engineer, deploy, integrate, and maintain cybersecurity tools such as SIEM pipelines, endpoint protection, identity security systems, and network security controls.
• Develop and maintain secure configuration baselines across operating systems, cloud platforms, and network infrastructure; monitor drift and drive remediation.
• Improve vulnerability management through engineering, ensuring scanning accuracy, coverage, asset associations, and workflow automation.
• Define and strengthen identity security requirements, including MFA, privileged access pathways, and conditional access policies.
• Perform cyber supply chain risk assessments for vendors, cloud services, data flows, and procurement processes.
• Produce compliance evidence and publish technical standards to support CJIS/HIPAA/PCI/NERC CIP/RCW requirements.
• Guide and mentor junior analysts and engineers in Security Engineering
• Promote a customer service-oriented approach to Security Engineering

Security Operations Track

• Design, tune, and manage SIEM/SOAR detection logic to improve alert fidelity and reduce false positives.
• Lead incident response and event triage, classifying, investigating, containing, and coordinating remediation of security events.
• Conduct proactive threat hunting across logs, endpoints, identities, and networks.
• Own operational vulnerability management including scanning, validation, prioritization, ticketing, and reporting against SLAs.
• Maintain and tune security tools including EDR, SOAR, email security filters, and log pipelines.
• Onboard log sources and verify telemetry quality, collaborating with IT owners to resolve data gaps.
• Develop SOC procedures and operational standards, producing reports and compliance evidence.
• Guide and mentor junior analysts and engineers in Security Operations
• Promote a customer service-oriented approach to Security Operations

Minimum Education*

Bachelor's degree in information technology, cybersecurity or directly related field

*Equivalency: 1 year of experience = 1 year of education

Minimum Experience*

4 years of progressively responsible information technology experience related to assignment

Licensing, Certifications and Other Requirements:

• Security+ or related certification (CISSP, SANS, GIAC, COMTIA)
• As Assigned: Washington State Driver's License; some positions may require the ability to pass additional background checks and / or obtain additional certifications, with maintenance thereafter
• On-call participation is required
• Ability to obtain CJIS/HIPAA/PCI/NERC CIP access

Security Engineering Skills:

• Secure design review and threat modeling
• Security tool engineering (SIEM pipelines, identity systems, endpoint agents)
• Configuration baselines and secure hardening
• Vulnerability engineering and automation
• Cyber supply chain assessment and vendor risk analysis
• CIS/NIST RMF implementation
• Scripting & Automation familiarity (Python/PowerShell)

Security Operations Skills:

• SIEM/SOAR administration and detection tuning
• Endpoint security administration
• Security investigations and incident response
• Threat hunting and MITRE ATT&CK familiarity
• Scripting familiarity (Python/PowerShell)
• Communication, customer service, and collaboration skills

Compensation & Benefits

Pay Details:

Hourly: $58.70 - $82.67

Annual Salary: $122,096.00 - $171,953.60

Employee Benefits | City of Tacoma

The Department

The Information Technology Department supports the City’s technology infrastructure, cybersecurity, application development, and innovation efforts across all City departments. The Cybersecurity Operations Team is part of the IT Department’s Information Assurance line of business and is responsible for protecting the City’s digital assets through the use of best practice controls and methodologies.

Joining the City of Tacoma’s cybersecurity team means doing meaningful work that protects critical public services relied upon by hundreds of thousands of residents every day. You’ll be part of a collaborative, mission-driven environment where technical excellence, integrity, and service to the community truly matter. Whether your strengths are in Security Engineering or Security Operations, you’ll work alongside peers who value curiosity, teamwork, and continuous improvement. Additionally, you’ll have the opportunity to directly shape the maturity, reliability, and resilience of the City’s technology landscape. We offer complex challenges, support for professional growth, and flexible hybrid-remote work, and the chance to leave a lasting impact on a modern municipal environment.

A Commitment to Equity & Diversity

At the City of Tacoma, we're on a mission to make our workforce as diverse and inclusive as the community we serve. We actively seek out candidates from a wide range of backgrounds and cultures. Join our team at the City of Tacoma and help us build a more vibrant, inclusive, and equitable community for all.

If you have a less traditional background, we want to hear about your transferrable skills and experience. We value a variety of perspectives and are excited to see what you bring to the table.

The Community

Tacoma is centrally located just 32 miles south of the city of Seattle and 31 miles north of the state capital, Olympia. The City of Tacoma is also home to the Port of Tacoma, which is among the largest container ports in the United States. Like most cities in the northwest, Tacoma is surrounded by beautiful nature, offering residents many opportunities for outdoor adventures.

Largely suburban in nature with a small, but dense, urban core, Tacoma is home to numerous institutes of higher learning that attract students from across the country. The University of Washington Tacoma, Pacific Lutheran University, University of Puget Sound, a satellite campus of the Evergreen State College, three community/technical colleges, and several trade and business schools are within Tacoma's geographic area. Downtown's Cultural District is the site of the Washington State History Museum, Museum of Glass, the Tacoma Art Museum, and America's Car Museum.

With its affordable housing and distinctive neighborhoods and business districts, the city has been recognized numerous times as a best city to live in the nation. To see a few of the great things Tacoma has to offer, view this YouTube Video!

View this exciting video to learn more about the City of Tacoma: https://www.youtube.com/watch?v=2n5MWl8KFvI