Cybersecurity Engineer Journey

Minimum Pay Rate: $114,712.00 

Maximum Pay Rate: $151,985.60 

Civil Service Status: Civil Service 

Apply by Date: 11/05/2025 

Posting Type: Open 

 

This position is a journey IT Cybersecurity Engineer position working in SMUD's IT Cybersecurity Engineering Team. Journey IT Cybersecurity Engineers work with SMUD's IT Infrastructure, IT Applications, Integrated Security Operations Center Engineers, and Cybersecurity Risk Analysts to lead, assess, engineer, maintain and operate IT Cybersecurity solutions. These solutions support SMUD's IT Cybersecurity risk and compliance standards.

Purpose

To provide specialized enterprise-wide security engineering and manage cyber protection, defense, design, development, implementation, and operation risk to our Information, Information and Operational Technology (IT/OT) Systems, and Network Infrastructures. 

Nature and Scope

There are four (4) levels in this job classification series that have similar job content but with progressively more challenging degrees and levels of skill, responsibility, knowledge, experience and qualification requirements:   

 

Flex Classifications (that permit progression from lower-level classes to higher level classes without examination based upon assessment of an individual's experience and performance) within the series:   

• Entry: Incumbent acquires knowledge, skills and abilities to perform the tasks associated within the series but are not yet demonstrating these at the Journey level.  
• Journey: Incumbent is demonstrating the required skills and knowledge to independently perform the full scope of the job.   
     

Non-Flex Classifications (that promote from lower-level classes to higher level classes and require an examination, such as an interview, based upon individual experience and performance) within the series:   

• Senior: Advanced journey level resource who is responsible for advanced assignments, as dictated by the work needing to be performed. May serve in a lead/supervisory capacity.  
• Principal: Subject matter expert/lead level/supervisory and is responsible for leading the most advanced work, as dictated by the work needing to be performed.   
      

Entry to Journey: Incumbents at the entry level are required to successfully “progress” to the journey level within 60 months of appointment to remain within the job series.   

    

Seniors and Principals must be hired through a promotional process and do not automatically progress from lower levels in the series. 

Duties and Responsibilities

• SMUD’s Cybersecurity Engineer Journey is responsible for independently performing engineering tasks in support of Senior and Principal cybersecurity engineers to assist with the following work roles:
• Defensive Cybersecurity: Evaluate data collected from various cybersecurity defense tools to mitigate risks.
• Digital Forensics: Assess digital evidence from computer security incidents to derive useful information in support of system and network vulnerability mitigation.
• Incident Response: Investigate, assess, and respond to network cybersecurity incidents.
• Infrastructure Support: Test, implement, deploy, maintain, and administer infrastructure hardware and software for cybersecurity.
• Insider Threat Assessment: Identify and assess the capabilities and activities of cybersecurity insider threats; produce findings to help initialize and support law enforcement and counterintelligence activities and investigations.
• Threat Assessment: Collect, process, assess, and disseminate cybersecurity threat assessments; develop cybersecurity indicators to maintain status awareness of the highly dynamic operating environment.
• Vulnerability Assessment: Assess systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy; measure effectiveness of defense-in-depth architecture against known vulnerabilities.
• Cybercrime: Investigate cyberspace intrusion incidents and crimes; apply tactics, techniques, and procedures for a full range of investigative tools and processes and appropriately balances the benefits of prosecution versus intelligence gathering.
• Digital Evidence Assessment: Identify, collect, examine, and preserve digital evidence using controlled and documented analytical and investigative techniques.
• Systems Testing and Evaluation: Plan, prepare, and execu