Information Security Engineer

Seattle Public Schools

1 week ago

Salary: $99k – $127k/yr
Location: John Stanford Center for Educational Excellence, WA, WA, US
Type: Full-time
Department: Engineering
Education: Bachelor
Source: GovernmentJobs

Description

This position is responsible, under general direction, for helping plan and carry out the organization's information security strategy and recommend security enhancements to management with the goal of protecting computer systems and networks. As sensitive data is more frequently stored on computer systems, and hacking and cyber-attacks grow more frequent, the organization relies on the Cyber Security Team to develop strategies to prevent, detect, respond to, and recover from Cyber Security incidents.

% of Time	Description of Essential Function and Desired Outcome
35	Assist with cybersecurity tickets and requests submitted through the ticketing system.
20	Monitor, tune, and respond to alerts triggered by security systems
20	Assist in performing forensic reviews using Microsoft/Office 365 tools and log aggregators
10	Monitor, review patching activities, and perform vulnerability scans
10	Develop standards, procedures, and playbooks for common cybersecurity workflows, leveraging a defense-in-depth methodology
5	Identify cost-effective solutions to cybersecurity challenges and actively follow cybersecurity professionals' blogs and industry news to stay informed of emerging threats and security strategies

OTHER FUNCTIONS:

May perform related duties consistent with the scope and intent of the position.

RELEVANT COMPETENCIES:

Competency	Definition	Behavioral Indicators
Technical Learning	Quickly learns and integrates new technical skills and knowledge; seeks out avenues to enhance technical knowledge.	Picks up and integrates technical skills quickly. Recognizes trends and effectively prepares for changes. Seeks out opportunities to advance one’s learning in relevant technical disciplines.
Time Management	Uses his or her time effectively and efficiently; concentrates his or her efforts on the most important priorities; adeptly handles several tasks at once.	Focuses his/her efforts on the most important priorities. Uses time effectively and efficiently. Handles multiple-tasks effectively and efficiently. Values other people’s time.
Interpersonal Skills	Is warm and easy to approach; builds constructive and effective relationships; uses diplomacy and tact to diffuse tense situations; has a style and charm that immediately puts others at ease and disarms hostility.	Relates well with others Builds constructive and effective relationships. Considers and responds appropriately to the needs and feelings of different situations. Is tactful, diplomatic and demonstrates consistency and fairness.
Functional/Technical Skills	Possesses required functional and technical knowledge and skills to do his or her job at a high level of accomplishment; demonstrates active interest and ability to enhance and apply new functional skills.	Understands the technical aspects of the job and keeps up-to-date on key technical or functional aspects of the job. Applies appropriate technical/functional knowledge to address situations in a timely manner. Thinks of ways to apply new developments to improve organizational performance. Shares expertise and skills with others when appropriate.

DISTRICT-WIDE CORE COMPETENCIES:

Competency	Definition	Behavioral Indicators
Collaboration	Develops cooperation and teamwork while participating in a group, working toward solutions which generally benefit all involved parties.	Is seen as a team player who encourages efficient and effective collaborations. Works skillfully in difficult situations with both internal and external groups. Represents his/her own interests while being open-minded to other groups. Builds respectful and productive relationships internally and externally.
Getting Results (Action Oriented)	Performs work with energy and drive; values planning, but will take quick, decisive action when an opportunity presents itself.	Demonstrates a strong sense of urgency about solving problems and getting work done. Focuses on achieving the goal even in the face of obstacles. Assumes responsibility for starting and finishing work with minimal supervision. Strives for new levels of performance.
Decision Quality & Problem Solving	Uses analysis, wisdom, experience and logical methods to make good decisions and solve difficult problems with effective solutions; appropriately incorporates multiple inputs to establish shared ownership and effective action.	Weighs the consequences of options before making a decision. Applies appropriate criteria to situations for the purpose of making decisions. Displays self-confidence in own judgment. Focuses on facts and solutions rather than opinions and problems.
Integrity	Is widely trusted; is seen as a direct, truthful individual; presents truthful information in an appropriate and helpful manner; keeps confidences; admits mistakes; doesn’t misrepresent him/herself for personal gain.	Deals with people and situations in an honest and forthright manner. Represents information and data accurately and completely. Represents the confidentiality of information and concerns shared by others. Takes ownership if a mistake is their own and does not blame others.
Accountability	Holds self and others accountable for measurable high-quality, timely and cost-effective results; determines objectives, sets priorities and delegates work; accepts responsibility for mistakes; complies with established control systems and rules.	Takes responsibility and action as if the risks (financial or otherwise) are his or her own. Holds individuals and teams accountable for their actions and results. Initiates action even if outcome is uncertain and is willing to accept the consequences of failure. Aligns own activities and priorities to meet broader organizational needs. Demonstrates courage and confidence in his or her own ability.

KNOWLEDGE, SKILLS AND ABILITIES:

Knowledge	Knowledge of different frameworks such as NIST SP-800 (or NIST CSF) and the MITRE ATT&CK Framework Knowledge of disaster recovery strategies Knowledge of computer forensic tools Knowledge of the CIA Triad, including its meaning and application through security controls Knowledge of the difference between Administrative, Technical, and Compensating controls Knowledge of risk assessment/management tools, technologies and methods Experience with anti-virus software, intrusion detection, firewalls Experience with content filtering Knowledge of digital forensic tools
Skills	Analyzing and documenting existing security controls and reviewing and updating related documentation Analyze security systems/controls and seek improvements on a continuous basis Evidence and chain-of-custody experience An understanding of best practices and how to implement them at an enterprise level Help educate the workforce on common threats through cyber security training and awareness Critical thinking skills and the ability to solve problems as they arise Planning, researching and developing security policies, standards and procedures Experience with scripting (PowerShell, Bash, Python, etc.)
Abilities	Ability to prioritize projects Able to work in a fast-paced environment Ability to communicate effectively, both verbally and in writing, to diverse audiences Ability to create complete, concise, and cogent forensic reports Ability to communicate security issues to peers and management

EDUCATION/EXPERIENCE:

A typical way to obtain the knowledge and abilities would be:

Bachelor's degree or completion of equivalent training; one (1) year of related cybersecurity work experience; an equivalent combination of education and experience; or equivalent work experience that may substitute for the education requirement on a year-for-year basis.

Any equivalent combination of education, experience and training that provides the required knowledge, skills and abilities to perform the work will be considered.

DESIRED CERTIFICATION & LICENSES

Valid Washington State Driver's License or evidence of equivalent mobility.
Holding one of the following professional certifications is desired:

CISSP
CISM
GSEC
CEH
Security+

CLEARANCES:

Criminal Justice fingerprint and background check.

Skills

PythonCybersecurityCISSP

Information Security Engineer

Description

Skills

Similar Jobs