SOS IT Security Engineer I

SOS IT Security Engineer I (Open)

The Office of the Chief Information Officer does not sponsor STEM or non-immigrant work visas for this position. This is the entry-level cybersecurity role in the series. IT Security Engineer I focuses on foundational cybersecurity tasks and working under close supervision to perform routine security operations. The role is designed for individuals developing their technical skills and abilities in cybersecurity. This role is part-time 20 hours a week and the assignment is temporary and expected to last 1 year.

Job Duties

Monitor real-time security alerts, logs, and events using organizationally established tools such as a Security Information and Event Management (SIEM). Perform initial triage and information gathering of security alerts, escalating complex issues to senior staff as needed. Perform fundamental security and vulnerability scans and assessments and meticulously document the findings. Aid in maintaining and updating cybersecurity and compliance documentation. Document security incidents and assist with incident reports. Participate in the management of the Agency Security Program by identifying and tracking security gaps and Plan of Action and Milestones (POAM) associated with the security program. This involves properly assigning and resolving security gaps including risk acceptance, remediation and compensating controls. Performs related work as assigned.

Requirements / Qualifications

Minimum Qualifications: Associate degree in computer science and two years of related technical and business experience. Two years of related technical and business experience may substitute for the required education on a year-for-year basis. OR Post high school coursework in computer science and three years of related technical and business experience.

Preferred Qualifications: Associate degree in an IT related field of study plus one year of relevant technical/business experience, or post-high school coursework plus two years of related experience. Alternatively, experience could substitute for education on a year-for-year basis.

Other: Regular and reliable attendance is required.

Knowledge, Skills & Abilities

• Cybersecurity principles and frameworks, including NIST, ISO, and CIS Controls.
• Networking protocols and technologies.
• Firewall platforms and security technologies.
• Intrusion detection and prevention systems and endpoint security solutions.
• Incident response processes, including triage, root cause analysis, containment, eradication, and recovery.
• Log analysis and correlation techniques for identifying anomalies, suspicious behavior, and indicators of compromise.
• Knowledge of compliance and regulatory frameworks as they relate to security operations.