IT Security Engineer

IT Security Engineer

The IT Security Engineer is responsible for monitoring, assessing and remediation of the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk. Works closely with the other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to development of policy and training.

The City of Des Moines promotes a healthy work life balance and offers a comprehensive benefits package including: Residency Incentive Program Paid Volunteer Time-Off Parental Leave Vacation and Sick Leave 12 Paid Holidays Health/Dental/Life/Long term disability Insurance Wellness Programs and Activities Tuition Reimbursement and Continuing Education Programs Public Service Student Loan Forgiveness Benefit Defined Benefit Pension Plan through IPERS Deferred Compensation Plan with City Match up to 2.5% Voluntary Insurance Benefit Options Employee Discount Program

Acceptable Experience and Training

• Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and Four years of applied experience managing enterprise security systems and performing security analysis;
• Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and Six years of applied experience managing enterprise security systems and performing security analysis;
• Technical certifications such as SSCP, CCSP, CISSP, or SANS; and Eight years of applied experience managing enterprise security systems and performing security analysis.

College transcripts and/or technical certifications, if applicable, need to be submitted to the City of Des Moines Human Resources Department by the application deadline.

Required Special Qualifications

• Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
• Possession of a valid Iowa driver's license or evidence of equivalent mobility.

Applicants who possess an out-of-state driver's license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline.

Examples of Essential Work (Illustrative Only)

• Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages and documents security platforms, systems, networks, and associated hardware and software related to information security.
• Monitors, assesses and responds to vulnerabilities, alerts and/or security incidents as needed to maintain 24/7 City operations. Stays apprised of and communicates emerging threats.
• Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues or requests from the IT support and administration teams.
• Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes and procedures.
• Identifies potential system or network weaknesses through existing security platforms and security best practices. Creates and documents security engineering and mitigation processes, standards and assessments.
• Plans, coordinates and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
• Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
• Helps create change requests, statements of work, project plans and/or budgets for security upgrades.
• Helps set, implement, and deliver City cybersecurity training program priorities and project plans.
• Advises on information security policy and programming. Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
• Works outside regular business hours when needed for maintenance, project performance, and incidents.
• Performs other related duties as assigned.