DEPARTMENT OF CHILD SAFETY

The Arizona Department of child Safety (DCS) is a social and human services agency whose mission is to successfully partner with families, caregivers, and the community to strengthen families, ensure safety, and achieve permanency for all Arizona’s children through prevention, services, and support.

INFORMATION SECURITY ENGINEER SENIOR

Job Location:

INFORMATION SECURITY
3003 N Central Ave Phoenix, AZ 85012

Posting Details:

Salary: $49.9952 HRLY/$103,999.02 Salary  

Grade: 28

Closing Date: December 5, 2024

Job Summary:

The Information Security Engineer Senior will work with the Network Team to actively monitor systems for attacks and intrusions. As well, the Information Security Engineer Senior will work with systems and software engineers to proactively identify and fix security flaws and vulnerabilities. This includes checking server and firewall logs, scrutinizing network traffic, establishing and updating virus scans, and troubleshooting. This position will analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required.

This position may offer the ability to work remotely, within Arizona, based upon the department's business needs and continual meeting of expected performance measures.

The State of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, and commissions, many State employees participate in the State’s Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance.

Job Duties:

• Ensures compliance of ADOA, NIST, ISO, and other standards in the organization
  
• Participate in the problem investigation connectivity incidents related to security devices, provide recommendations to improve reliability and availability, or reduce recovery time. Reports on security updates, patching, and antivirus applications.
  
• Maintains, monitors, and supports the infrastructure environment and/or facilities. Monitors ticketing queue and responds to service requests or incidents. Monitors logs and manages user accounts. Manages and monitors system updates for in scope security systems.
  
• Performs security system analysis, design, implementation and maintenance. Develops new alerts and monitoring techniques based on engineering requirements.
  
• Develop and document network security topology diagrams. Performs reviews periodically with users and vendors.
  
• Troubleshoots advanced issues/problems; file share access, application access. Participates in the creation and maintenance of metrics around the system and institutes a process for continuous improvement.
  
• Leads the administration and maintenance of firewalls, performs intrusion detection analysis. Leads enterprise base work initiatives and projects. Communicates events to stakeholders, IT teams, and leadership.
  
• Provides Level 3 production support. Work with Vendors for Level 4 Support issues as needed. Works with vendors and architects to understand their technology road-maps.
  
• Leads forensic efforts. Defines and ensures continuous monitoring procedures are set according to the standard procedures and requirements.
• Participates in business requirements meetings as needed.
  
• Participates in External Audits and Assessments. Implements or coordinates remediation required by audits/assessments, and document exceptions as necessary.
  
• Other duties as assigned as related to the position.

Knowledge, Skills & Abilities (KSAs):

Knowledge of:

• Information security technologies, industry trends and best practices in the areas of risk assessment, compliance and vulnerability management
  
• Specific information protection standards (HIPAA, CGIS, IRS, etc. as appropriate)
  
• Proficiency with the concepts of ISO27000, NIST 800 and other security standards in the organization
  
• Networking technologies, including: IP Addressing, routing, switching, load balancing, DNS, DHCP, NAT rules
  
• Complex network operating environments
  
• Information secu