Isp It Info Security Engineer Iii

at Idaho Division of Human Resources in Meridian, Idaho, United States

ISP IT Info Security Engineer III

Posting Begin Date: 2024/02/27

Posting End Date: 2024/03/11

Category: IT And Computers

Sub Category: Security

Work Type: Full Time

Location: Meridian, ID, United States

Minimum Salary: 33.96

Maximum Salary: 33.96

Pay Rate Type: Hourly

Description

Idaho State Police - Meridian, Idaho

State of Idaho Opportunity

IT Information Security Engineer III

Summary:

At the Idaho State Police IT Department, we are committed to maintaining the highest standards of information security, an essential component of our law enforcement and public safety missions. Our team in Meridian, Idaho, is dedicated to securing the digital infrastructure that supports these critical operations across the state. We invite you to join us in this vital endeavor.

We are currently seeking an IT Information Security Engineer III, a role crucial for safeguarding our computer network defenses and managing security resources. This position involves a wide range of responsibilities, including the development, deployment, and maintenance of our security infrastructure, as well as monitoring networks to proactively address unauthorized activities.

The ideal candidate will bring a depth of knowledge and experience in information security technologies and practices. Your expertise will be key to ensuring the ongoing protection and resilience of our systems, a necessity for our continuous 24/7/365 operations. In this role, you will significantly contribute to the Idaho State Police's mission by enhancing our overall security posture and responding to the evolving landscape of cyber threats.

PLEASE NOTE: The successful applicant will be required to complete a background investigation, polygraph examination and comply with our drug policy. Please review the ISP Drug Policy (https://isp.idaho.gov/hr/drug/) and ISP Grooming and Appearance Standards (https://isp.idaho.gov/hr/grooming-appearance/) .

Examples of Duties

Research opportunities to improve information security standards and identify best practices.

Ensure the safety and security of all information systems assets using extensive expertise.

Design and implement procedures and controls to protect information system assets and data.

Provide guidance and direction for the physical protection of information system assets, organizational information, and customer data.

Perform organizational and system-level risk assessments in accordance with the risk management plan.

Conduct e-discovery and provide information forensics services.

Collaborate with other IT departments and external agencies to develop and enforce statewide information security policies and procedures.

Lead security awareness training programs for staff and officers.

Manage incident response activities, including investigating security breaches.

Stay updated on emerging security threats and technologies; recommend enhancements to security solutions.

Develop and maintain disaster recovery and business continuity plans for information systems.

Participate in the selection and deployment of security software and hardware solutions.

Conduct security audits and compliance checks.

Provide technical expertise in the procurement of new security technologies and services.

Minimum Qualifications

Considerable knowledge of computer networking concepts and protocols, and network security methodologies.

+ Typically gained by a master's degree directly related to information technology (IT), OR a bachelor's degree directly related to IT AND 1-year of relevant work experience, OR at least 4-years of work experience in IT (work must be of a high-level in nature). A combination of coursework and experience that represents considerable knowledge may also be considered. Education and experience must be within the last 5 years.

Considerable knowledge of internal tactics to anticipate and mitigate cyber security threat capabilities and actions.

+ Typically gained by a master's degree directly related to information technology (IT), OR a bachelor's degree directly related to IT AND 1-year of relevant work experience, OR at least 4-years of work experience in IT (work must be of a high-level in nature). A combination of coursework and experience that represents considerable knowledge may also be considered. Education and experience must be within the last 5 years.

Considerable knowledge of risk management processes (e.g., methods for assessing, documenting, and mitigating risk).

+ Typically gained by a master's degree directly related to information technology (IT), OR a bachelor's degree directly related to IT AND 1-year of relevant work experience, OR at least 4-years of work experience in IT (work must be of a high-level in nature). A combination of coursework and experience that represents considerable knowledge may also be considered. Education and experience must be within the last 5 years.

Good knowledge of cyber intelligence/information collection capabilities and conducting cyber incident investigations.

+ Typically gained by a bachelor's degree or higher in a related field OR at least two college courses in a related subject area AND at least 2-years or applicable work experience in a related field. A combination of coursework and experience that represents good knowledge may also be considered. Education and experience must be within the last 5 years.

Good knowledge of assessing cyber security regulatory compliance and policy & procedure writing.

+ Typically gained by a bachelor's degree or higher in a related field OR at least two college courses in a related subject area AND at least 2-years or applicable work experience in a related field. A combination of coursework and experience that represents good knowledge may also be considered. Education and experience must be within the last 5 years.

Good knowledge of supervisory practices.

+ Typically gained by a bachelor's degree or higher in a related field OR at least two college courses in a related subject area AND at least 2-years or applicable work experience in a related field. A combination of coursework and experience that represents good knowledge may also be considered. Education and experience must be within the last 5 years.

Preferred Qualifications

Advanced degree in Information Security, Cybersecurity, Computer Science, or a related field.

Professional certifications such as CISSP, CISM, CEH, or equivalent.

Extensive experience in information security within a law enforcement or governmental agency environment.

Proficiency in various cybersecurity tools and technologies, including intrusion detection and prevention systems, firewalls, antivirus software, and security information and event management (SIEM) systems.

Strong understanding of network infrastructure and protocols, including TCP/IP, DNS, DHCP, VPN, and VLANs.

Experience in managing and mitigating advanced persistent threats (APTs) and other sophisticated cyber attacks.

Skilled in digital forensics and incident response, including the use of forensic tools and techniques.

Knowledge of current cybersecurity trends, threats, and the evolving landscape of cybercrime.

Experience in developing and implementing comprehensive security policies, procedures, and training programs.

Excellent communication skills, both written and verbal, with the ability to articulate complex security concepts to a non-technical audience.

Demonstrated ability to lead and mentor a team of information security professionals.

Experience in regulatory compliance and familiarity with laws and regulations related to information security and data privacy.

Capability to work collaboratively with vario