Information Security Engineer/Analyst III

Port of Seattle•SeaTac, WA

1d•Hybrid

About The Position

As the Information Security Engineer/Analyst III, you will identify, analyze, and mitigate security threats to the Port’s networks, systems, and data. You will create end-user training content related to information security and cybersecurity and effectively facilitate trainings for diverse audiences. You will lead efforts to assess, influence, recommend, deploy, and integrate medium to large or complex cybersecurity solutions. You will partner with Legal and other stakeholders to support record retention and e-discovery needs. You will deliver cybersecurity portions of large project implementations, including threat models, cybersecurity risk assessments, vulnerability scanning, system security design documentation, and third-party security testing reports. You will detect and respond to advanced threats, threat actor techniques, anomalous or suspicious activity, combined with intelligence, to identify potential and active risks to systems and data. You will engage in incident response activities and ensure the Port’s data and infrastructure are protected by enabling appropriate security controls. You will develop and maintain Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation. You will provide mentorship, training, and professional development for Information Security Engineer/Analyst Levels I and II. Work Schedule – Your normal work schedule will be Monday – Friday, 8:00 a.m. to 5:00 p.m. (40 hours per week). Slightly more flexible start and end times are available in this role. You may be required to work on-call to respond during off shift hours to address any issues that could adversely impact Port operations. Work Environment - This work will take place in a hybrid/in-office setting at Management’s discretion. Washington State Residency Requirement – Employees must establish a residence in Washington state within 30 days of their first day of employment and must maintain a residence in Washington State during their employment with the Port of Seattle. If a position is eligible to telework, work performed while teleworking must be performed in Washington State. Security Requirements – As the successful candidate, you must pass a Transportation Security Administration (TSA) background check as well as a criminal history background check with the Federal Bureau of Investigation (FBI). Your employment will be contingent upon obtaining a Port of Seattle ID badge upon clearance. You will also be required to obtain a U.S. Customs and Border Patrol (CBP) Customs Seal within 30 days of hire. In this role, you will be required to access Port of Seattle Police Department equipment, office locations, systems and/or vehicles. In compliance with Federal and State laws as the successful candidate, you will be required to pass a Criminal Justice Information Services (CJIS) criminal history background check. The Port of Seattle is unable to sponsor employment visas at this time. Salary offers will be made within the posted range. Placement within the range will be determined based on your similar work experience. The Port considers work experience to be similar if the scope and level of responsibility of your prior positions match the job being offered. Every role at the Port of Seattle is vital to our thriving community. We are a leader in moving people and cargo across the country and around the world. With facilities and property ranging in scope from a half-acre park to one of the largest airports and container terminals on the West Coast, we maximize the public assets in our portfolio with an eye toward best uses and environmental sustainability. Find out more here . Our vision is to create a Port that mirrors – throughout its breadth of operations and services and within its leadership – the diversity of our communities, instill principles of equity into its culture, and ensures a fair and intentional distribution of opportunities to expand economic develop and quality of life for all in our region. Find out more about how our values RAISE us up and our commitment to equity . The Port of Seattle offers an extensive benefits package that rewards our staff for their valuable contributions towards the Port‘s mission. In addition to the summary below, benefit details for non-represented positions can be found on the Port of Seattle‘s website. If the position is represented by a union, please refer to the “ Collective Bargaining Agreement ” or contact the appropriate Union Representative for specific information related to benefits and eligibility. Healthcare – Medical, Dental, and Vision Care with options that work for you and your family. Paid Vacation – Just about four weeks per year that increases with tenure to rest and rejuvenate. Paid Sick Leave – At least one hour of sick leave for every 40 hours worked. Holidays – More than ten days per year to celebrate with family and friends away from work. Pension/Retirement Plans – A pension and additional savings plans to prepare for your future after the Port. Getting to Work – From subsidized parking and a low-cost public transit card to alternative work arrangements giving you an opportunity to work hybrid. Parental Leave – Six weeks of paid leave to spend with new additions to your immediate family. Development – From tuition reimbursement, training, stretch assignments and internal internships, we support a learning culture. Equity, Diversity, and Inclusion – The Port of Seattle values diversity as a source of innovation and strength. We are actively working across the organization to create a culture where all employees – regardless of race, gender, and other identities – succeed and reach their fullest potential. Work-Life Balance – We provide the resources to help you create habits to be healthy and balanced. Mission Driven – We are focused together in promoting economic opportunities and quality of life in the region by advancing trade, travel, commerce, and job creation in an equitable, accountable, and environmentally responsible manner. Experienced – You have three (3) years of experience in Information Technology and/or Security. Desired – We hope you have the following licenses/certifications: (ISC)² Certified Information Systems Security Professional (CISSP), SANS GIAC (Global Information Assurance Certification), CompTIA Advanced Security Practitioner (CASP+), and/or ISACA (Information Systems Audit and Control Association) Certified Information Security Manager (CISM). Committed to Equity – You will apply equity and exemplify shared values, behaviors, and practices in all aspects of the work. At the Port of Seattle, equity is a daily responsibility and a foundational expectation for all Port employees. Problem Solver – You have strong analytical and planning skills and can use critical thinking, logic, and reasoning to evaluate strengths and weaknesses to identify the most appropriate solution. Knowledgeable – You can use, implement, manage, and/or provide configuration guidance on a variety of security technologies. You can advise on, implement, and maintain security controls and policies that are aligned with compliance and regulatory framework requirements such as Criminal Justice Information Services (CJIS), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI-DSS), Federal Information Security Modernization Act (FISMA), and General Data Protection Regulation (GDPR), as well as the requirements for securing sensitive data. Collaborative – You have well-developed skills in cross-departmental coordination, including understanding other groups’ technical needs and collaborate for mutual benefit. You can work closely with a variety of internal and external stakeholders to resolve strategic issues. Effective Communicator – You can communicate, both orally and written, complex technical concepts effectively with technical and non-technical stakeholders, decision-makers, business partners, and team members.

Requirements

You have three (3) years of experience in Information Technology and/or Security.
You will apply equity and exemplify shared values, behaviors, and practices in all aspects of the work. At the Port of Seattle, equity is a daily responsibility and a foundational expectation for all Port employees.
You have strong analytical and planning skills and can use critical thinking, logic, and reasoning to evaluate strengths and weaknesses to identify the most appropriate solution.
You can use, implement, manage, and/or provide configuration guidance on a variety of security technologies.
You can advise on, implement, and maintain security controls and policies that are aligned with compliance and regulatory framework requirements such as Criminal Justice Information Services (CJIS), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI-DSS), Federal Information Security Modernization Act (FISMA), and General Data Protection Regulation (GDPR), as well as the requirements for securing sensitive data.
You have well-developed skills in cross-departmental coordination, including understanding other groups’ technical needs and collaborate for mutual benefit.
You can work closely with a variety of internal and external stakeholders to resolve strategic issues.
You can communicate, both orally and written, complex technical concepts effectively with technical and non-technical stakeholders, decision-makers, business partners, and team members.

Nice To Haves

(ISC)² Certified Information Systems Security Professional (CISSP)
SANS GIAC (Global Information Assurance Certification)
CompTIA Advanced Security Practitioner (CASP+)
ISACA (Information Systems Audit and Control Association) Certified Information Security Manager (CISM)

Responsibilities

Identify, analyze, and mitigate security threats to the Port’s networks, systems, and data.
Create end-user training content related to information security and cybersecurity and effectively facilitate trainings for diverse audiences.
Lead efforts to assess, influence, recommend, deploy, and integrate medium to large or complex cybersecurity solutions.
Partner with Legal and other stakeholders to support record retention and e-discovery needs.
Deliver cybersecurity portions of large project implementations, including threat models, cybersecurity risk assessments, vulnerability scanning, system security design documentation, and third-party security testing reports.
Detect and respond to advanced threats, threat actor techniques, anomalous or suspicious activity, combined with intelligence, to identify potential and active risks to systems and data.
Engage in incident response activities and ensure the Port’s data and infrastructure are protected by enabling appropriate security controls.
Develop and maintain Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation.
Provide mentorship, training, and professional development for Information Security Engineer/Analyst Levels I and II.

Benefits

Healthcare – Medical, Dental, and Vision Care with options that work for you and your family.
Paid Vacation – Just about four weeks per year that increases with tenure to rest and rejuvenate.
Paid Sick Leave – At least one hour of sick leave for every 40 hours worked.
Holidays – More than ten days per year to celebrate with family and friends away from work.
Pension/Retirement Plans – A pension and additional savings plans to prepare for your future after the Port.
Getting to Work – From subsidized parking and a low-cost public transit card to alternative work arrangements giving you an opportunity to work hybrid.
Parental Leave – Six weeks of paid leave to spend with new additions to your immediate family.
Development – From tuition reimbursement, training, stretch assignments and internal internships, we support a learning culture.
Equity, Diversity, and Inclusion – The Port of Seattle values diversity as a source of innovation and strength. We are actively working across the organization to create a culture where all employees – regardless of race, gender, and other identities – succeed and reach their fullest potential.
Work-Life Balance – We provide the resources to help you create habits to be healthy and balanced.
Mission Driven – We are focused together in promoting economic opportunities and quality of life in the region by advancing trade, travel, commerce, and job creation in an equitable, accountable, and environmentally responsible manner.