IT Security Engineer

The IT Security Engineer is responsible for monitoring, assessing and remediation of the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk.
 
Works closely with the other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to development of policy and training.

The City of Des Moines promotes a healthy work life balance and offers a comprehensive benefits package including:
 
 Residency Incentive Program
 Paid Volunteer Time-Off
 Parental Leave
 Vacation and Sick Leave
 12 Paid Holidays
 Health/Dental/Life/Long term disability Insurance
 Wellness Programs and Activities
 Tuition Reimbursement and Continuing Education Programs
 Public Service Student Loan Forgiveness Benefit
 Defined Benefit Pension Plan through IPERS
 Deferred Compensation Plan with City Match up to 2.5%
 Voluntary Insurance Benefit Options
 Employee Discount Program 

• Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and
• Four years of applied experience managing enterprise security systems and performing security analysis; 

OR

• Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and 
• Six years of applied experience managing enterprise security systems and performing security analysis; 

OR

• Technical certifications such as SSCP, CCSP, CISSP, or SANS; and
• Eight years of applied experience managing enterprise security systems and performing security analysis.

College transcripts and/or technical certifications, if applicable, need to be submitted to the City of Des Moines Human Resources Department by the application deadline to receive credit.  Please attach to your online application or submit separately by email to [email protected], by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309 by the application deadline.    

• Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
• Possession of a valid Iowa driver’s license or evidence of equivalent mobility.

Applicants who possess an out-of-state driver's license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline. Please attach to your online application or submit separately by email to [email protected], by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309 by the application deadline.    

• Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages and documents security platforms, systems, networks, and associated hardware and software related to information security.
• Monitors, assesses and responds to vulnerabilities, alerts and/or security incidents as needed to maintain 24/7 City operations. Stays apprised of and communicates emerging threats.
• Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues or requests from the IT support and administration teams.
• Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes and procedures.
•  Identifies potential system or network weaknesses through existing security platforms and security best practices.Creates and documents security engineering and mitigation processes, standards and assessments.
• Plans, coordinates and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
• Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
• Helps create change requests, statements of work, project plans and/or budgets for security upgrades.
• Helps set, implement, and deliver City cybersecurity training program priorities and project plans. 
• Advises on information security policy and programming. Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
• Works outside regular business hours when needed for maintenance, project performance, and incidents.
• Performs other related duties as assigned.