Information Security Engineer

ARIZONA DEPARTMENT OF REVENUE

Funding Arizona’s future through excellence in innovation, exceptional customer service and public servant-led continuous improvement. All Arizona State employees operate within the Arizona Management System (AMS), an intentional, results-driven approach for doing the work of state government. Our goal is for every ADOR team member to reflect on individual and team performance, reduce waste, and commit to continuous improvement with sustainable progress. Through AMS, every ADOR team member seeks to understand customer needs, identify problems, improve processes, and measure results.

Information Security Engineer

*This position will work remotely with rare in-office visits*

Office Location:

1600 West Monroe Street

Phoenix, Arizona 85007

Posting Details:

Annual Salary: $103,400

Grade: 26

This position will remain open until filled  

Job Summary:

This position is an integral part of the Information Security Team which aids in reducing overall organization risk by way of deployment, management, monitoring, and tuning of technical security controls. Specifically, the position of information security engineer partners with the Senior Security Engineer and Security Architect to recommend security solutions and technology in design to ensure smooth implementations and upgrades to technology. Additionally, this position reviews security policies, standards, and procedures and creates associated security procedures in coordination with the CISO and appropriate teams. This position also works closely with security analysts to gain insight into threat, vulnerability, and incident information.

Essential Functions:

• Security Engineering and System Security Evaluation
• Vulnerability Management
• Incident Response
• Agency/Department Compliance & Continuous Improvement
• Knowledge Management

For more details regarding the essential functions, please review the full job description here -> Information Security Engineer S1004 (1).pdf

Knowledge, Skills & Abilities (KSAs):

Knowledge/Understanding

• Understanding of enabling for recommending equipment, resources, and software; 
• Working knowledge of perimeter security technologies including firewalls, IDS/IPS, network access control and network segmentation; and of the security concepts related to DNS, routing, authentication, VPN, proxy services and - DDOS mitigation technologies; and with Data-at-rest encryption, certificate validation, IDS/IPS, Firewalls, SIEMs and Log Management, log analysis, HTTP and TCP/IP analysis
• Familiarity with the concepts of ISO 27000, NIST 800 and other security standards in the organization
• Familiarity with vulnerability identification and assessment including the OWASP Top 10 and SANS Top 25 
• Familiarity with products from the following vendors:  Trellix, Palo Alto, Tenable, SolarWinds, Tenable, and Crowdstrike
• Familiarity with risk assessment procedures, policy formation, role-based authorization methodologies, authentication technologies and security attack pathologies
• Familiarity with the practices and methods of IT strategy, enterprise architecture and security architecture.

Skills

• Excellent verbal, written, and listening communication skills with the ability to effectively communicate with various stakeholder groups
• Strong technical writing skills
• Effective organization and time management skills with the ability to manage multiple projects simultaneously and work in high-pressure situations
• Effective interpersonal skills and demeanor
• Proficient in the use of a PC in a Windows environment; in the use of the Internet; in the use of MS Office Applications such as Outlook, Word and Excel, PowerPoint; and in the use of Google Suite applications such as Gmail, Sheets, Docs, and Driv.
• Strong proficiency working with Windows, UNIX and Linux operating systems

Abilities

• Ability to clear a comprehensive background and clearance process that includes an Arizona tax compliance verification, and a criminal background check through the FBI via level one fingerprint clearance through the Arizona Department of Public Safety
• Ability to work both independently and collaboratively as part of a team
• Ability to work in a confidential manner, ensuring information is shared with internal and external individuals in an appropriate manner 
• Ability to provide proactive problem solving capabilities to complex problems in partnership with senior roles
• Ability to support disaster recovery and business continuity plans
• Ability to build strong relationships inside and outside the organization
• Ability to synthesize feedback and adjust plans accordingly
• Ability to balance, prioritize, and organize multiple tasks
• Ability to work collaboratively
• Ability to evaluate and test emerging technologies and processes
• Ability to understand and solve problems by applying advanced analytical skills to include collecting, integrating and analyzing all relevant data and information and reduced that information down to manageable components and/or charts, diagrams or graphs; identifying a number of solutions to complex problems integrating findings from several different disciplines, identifying and evaluating the various options developed and selects the most effective solution; drawing logical and objective conclusions from the data and validates them as the prime cause and contributing causes; identifying a number of solutions to the problem by identifying and evaluating the various options developed and selects the most effective solution. 
• Ability to learn and apply LEAN concepts, principles and tools used to create and deliver perspectives with the fewest resources with continuous problem solving
• Willingness and ability to embody ADOR’s core values of Do the Right Thing, Commit to Excellence, and Care About One Another

Selective Preference(s):

One of the following certifications:

• CEH: Certified Ethical Hacker
• GSEC / GCIH / GCIA: GIAC Security Certifications

Experience with Continuous Improvement or LEAN

Requirements:

Education & Experience

• Any combination that meets the knowledge, skills and abilities (KSA); typical ways KSAs are obtained may include but are not limited to: a relevant degree from an accredited college or university such as Bachelors Degree (e.g., B.S.), training, coursework, and work experience relevant to the assignment
• Minimum of 5 years of extensive experience in information security systems engineering or related (e.g., networking, software development, AI, Cloud)

Licenses & Certifications

One of the following:

• CompTIA Sec+
• CompTIA A+

Benefits:

The State of Arizona offers a comprehensive benefits package to include:

• Optional employee benefits include short-term disability insurance, deferred compensation plans, and supplemental life insurance
• Life insurance and long-term disability insurance
• Vacation plus 10 paid holidays per year
• Health and dental insurance
• Retirement plan
• Sick leave

Learn more about the Paid Parental Leave pilot program here. For a complete list of benefits provided by The State of Arizona, please visit our benefits page

Retirement:

• Positions in this classification participate in the Arizona State Retirement System (ASRS)
• Please note that enrollment eligibility will become effective after 27 weeks of employment

Contact Us:

If you have any questions, please contact the ADOR Human Resources office at humanresources@azdor.gov or at 602-716-6950 for assistance