ARIZONA DEPARTMENT OF REVENUE

Funding Arizona’s future through excellence in innovation, exceptional customer service and public servant-led continuous improvement.

All Arizona State employees operate within the Arizona Management System (AMS), an intentional, results-driven approach for doing the work of state government. Our goal is for every ADOR team member to reflect on individual and team performance, reduce waste, and commit to continuous improvement with sustainable progress. Through AMS, every ADOR team member seeks to understand customer needs, identify problems, improve processes, and measure results.

Information Security Engineer, Senior

Job Location:

Address:  1600 W. Monroe Street, Phoenix, AZ. 85007

Posting Details:

Salary: $100,000

Grade: 28

Closing Date: Open Until Filled

This position may offer the ability to work remotely, within Arizona, based upon the department's business needs and continual meeting of expected performance measures.

Job Summary:

This position is an integral part of the Information Security Team which aids in reducing overall organization risk by way of deployment, management, monitoring, and tuning of technical security controls. Additionally, this position reviews security policies and creates associated security standards and procedures in coordination with the CISO and appropriate teams. Specifically, the position of senior security engineer partners with members of the architect team and InfoSec team to recommend security solutions and technology in design to ensure smooth implementations and upgrades to technology. Additionally, this position serves as a solutions research member of InfoSec for supporting technology and maintaining security posture during planning and operations. This position works closely with security analysts to gain insight into threat, vulnerability, and incident information, and with the Architect to incorporate any control decisions into the enterprise security design.

This position does not have direct reports.

Job Duties:  Information Security Engineer Senior.pdf

Check out the attached job description for more details!

Job Requirements:

Education & Experience
-Any combination that meets the knowledge, skills and abilities (KSA); typical ways KSAs are obtained may include but are not limited to: a relevant degree from an accredited college or university such as Bachelor's Degree (e.g., B.S.), training, coursework, and work experience relevant to the assignment
-Minimum of 8 years of extensive experience in information security systems engineering or related (e.g., networking, software development, AI, Cloud)

Licenses & Certifications
-Current certification in one of the following:
-ISSP-ISSAP: Information Systems Security Architecture Professional
-CISM: Certified Information Security Manager
-CEH: Certified Ethical Hacker
-CSSA: Certified SCADA Security Architect
-GSEC / GCIH / GCIA: GIAC Security Certifications
-CompTIA Sec+

Knowledge/Understanding
-Strong working knowledge of information security technologies and best practices in the areas of risk assessment, compliance and vulnerability management and secure system design
-Working knowledge of perimeter security technologies including firewalls, IDS/IPS, network access control and network segmentation
-Working knowledge of the security concepts related to DNS, routing, authentication, VPN, proxy services and - DDOS mitigation technologies
-Knowledge of third party auditing and cloud risk
-Understanding of network security architecture development and definition
-Familiarity with the concepts of ISO 27000, NIST 800 and other security standards in the organization
-Familiarity with Data-at-rest encryption, certificate validation, IDS/IPS, Firewalls, SIEMs and -Log Management, log analysis, HTTP and TCP/IP analysis
-Familiarity with vulnerability identification and assessment including the OWASP Top 10 and SANS Top 25
-Familiarity with products from the following vendors: Trellix, Palo Alto, Tenable, SolarWinds, Tenable, and Crowdstrike
-Familiarity with risk