Cyber Security Engineer II
Role summary
Salt Lake County is seeking a Cyber Security Engineer II to join their team. This role involves designing, developing, implementing, monitoring, and maintaining enterprise-wide cyber security programs to protect the confidentiality, integrity, and availability of County systems and resources. The position requires a Bachelor's degree in Information Technology or a related field, plus four years of experience, or an equivalent combination of education and experience. Key responsibilities include deploying security programs, identifying and communicating security issues, educating users, responding to incidents, performing investigations, and implementing security controls for payment card data and cloud environments. Professional certifications are preferred. The role operates in a hybrid work environment.
Job Description:
Salt Lake County…A career with a purpose in the community you love!
Salt Lake County invites you to explore our exciting career opportunities. We seek highly enthusiastic individuals to enrich our County with your experience and talent. If you enjoy working in a team environment that is committed to changing the lives of its community, please keep reading.
What it is like to work here:
At Salt Lake County our culture is woven into all aspects of our work and our employees’ lives, from the way we treat each other to the way we support the community. To promote and foster a fun and healthy work environment, we appreciate employees through great benefits, a healthy work life balance and room to grow and develop.
Surround yourself with:
Peers who are motivated to make a difference in the lives of those we serve. We serve Salt Lake County and envision a safe and beautiful place for all to live work and have fun. Salt Lake County is about connecting people and championing our community. Community is more than a place….its our heart and service that bring us together.
We encourage a work life balance:
Working for Salt Lake County is more than just a paycheck. A career with /Salt Lake County includes several benefits and perks. We support our employees with 12 Holidays, up to 24 vacation days, 12 sick days and one personal day every year. We work in a hybrid environment giving you flexibility to manage working from home and being in office.
Additional Benefits include:
- Retirement options for hybrid pension/401(k) or 401(k) only with a 10% contribution
Medical coverage including a 100% county paid premium option-Dental and Vision coverage including coverage for adult designees
- Health Savings account with a county contribution up to $1200/year, Flexible Spending Account
- 100% county-paid Long-Term Disability and Short-Term Disability option
- Professional Development
- Plus: Onsite medical clinic, childcare and gym; hospital insurance, pet insurance auto and home insurance and discounts at County facilities.
JOB SUMMARY
Works under the direction of the Cyber Security Manager to provide the design, development, implementation, monitoring, and maintenance Salt Lake County’s enterprise-wide cyber security programs which are designed to protect the confidentiality, integrity, and availability of all County systems and resources, including but not limited to voice, data, network, applications, and computer infrastructure, and their associated information assets.
MINIMUM QUALIFICATIONS
Bachelor’s degree from an accredited college or university in Information Technology or closely related field, plus four (4) years of related experience; OR an equivalent combination of eight (8) years of related education and experience.
Professional certifications related to information security or computer networking are preferred.
Due to the nature of this position, the successful applicant must pass a required pre-employment background check and subsequent mandatory background checks in accordance with current County Human Resources policy requirements.
ESSENTIAL FUNCTIONS
- Complies with and promotes all IT security policies, processes, procedures, and best practices.
- Act in an advisory role to other teams both internal to IT and throughout the county.
- Deploys and integrates IT security and privacy-related programs designed to protect the County’s systems, applications, and data.
- Identifies and communicates security issues and their impact on the IT organization and the County and assists with executing successful solutions while tracking and achieving measurable results.
- Establishes and maintains positive business relationships with users countywide to actively market and educate them on the importance of security cooperation and compliance.
- Deploys, as instructed, the Information Security plans and short-term and long-term strategies for the IT organization and the County.
- Documents processes and monitors systems that report on the effectiveness of systems and controls necessary to protect the County’s information technology systems, assets, and interests.
- Monitors compliance with the organization's information security policies and procedures among employees, contractors, partners, and other third parties and resolves potential issues as needed. Assists with information security risk assessments.
- Responds to information security incidents and follow up to ensure that proper protection and corrective measures have been successfully taken.
- Performs and participates in forensic investigations and audits as required.
- Design, develop, and implement security controls for payment card data systems.
- Implements a cloud security strategy to protect County IT systems and data in PaaS, SaaS, and laaS environments.
- Embraces managed security service options as they are considered.
- Stays current with technical knowledge in information systems, security and privacy technologies, best practices, and use of appropriate security controls and methods.
- Maintains certifications as specified by the Associate Division Director, Cyber Security
KNOWLEDGE, SKILLS AND ABILITIES (KSA)
Knowledge of:
- Security concepts, principles, and best practices for voice and data networks; applications and architecture; design and testing; hosting and cloud-based services; Internet/Intranet technology and mobile devices.
- Information security architecture, technologies, tools, practices, and controls.
- Operations, services, concepts, terms, and activities common to a comprehensive, state-of-the-art information systems security program and current regulatory requirements.
- Current and emerging security technologies including by not limited to Firewalls, Remote Access Methods, Email Security, Encryption Methods, Vulnerability Management, Traffic Management, Security Event Information Management, Endpoint Detection and Response, Identity and Access Management.
- Understanding PCI-DSS, HIPAA, and CJIS compliance requirements and how to protect PII.
- Methods and techniques for evaluating information security and developing appropriate resolutions.
Skills and Abilities to:
- Communicate effectively both verbally and in writing.
- Think logically and systematically; solve complex problems; apply general principles to specific conditions effectively.
- Facilitate projects and meetings as assigned, comfortable working with all levels of the organization.
- Analyze business and technical processes and determine ways of making them more efficient.
- Remain calm under stress and can quickly adjust, evolve and multi-task between several competing priorities at once.
- Maintain confidentiality and professionalism.
- Be able to work independently or as part of a larger security team.
Due to the nature of this position, the successful applicant must pass a required background check through fingerprinting and enrollment in the continuous RAP Back (Record of Arrest and Prosecution Back) program in accordance with current County Human Resources policy requirements.
Similar roles
Cyber Security Engineer IISundayy · Denver, Colorado, United States · Remote- Cyber Security Engineer IIRedhorse Corporation · Woodbridge, Virginia, United States · Onsite
Cyber Security Engineer IIBAE Systems USA · Reston, Virginia, United States · Hybrid- Cyber Security Engineer IIAEVEX · Huntsville, Alabama, United States · Onsite
- Cyber Security Engineer IIHoward University Hospital · Washington, District of Columbia, United States · Onsite