Information Security Engineer - ITS4

Information Security Engineer - ITS4

04 Apr 2024
Minnesota, Stpaul 00000 Stpaul USA

Information Security Engineer - ITS4

Working Title: Information Security EngineerJob Class: Information Technology Specialist 4Agency: Minnesota IT Services

Who May Apply : Open to all qualified job seekers

Date Posted : 04/04/2024

Closing Date : 04/10/2024

Hiring Agency/Seniority Unit : Minnesota IT Services

Division/Unit : Enterprise / Vulnerability Management

Work Shift/Work Hours : Day

Days of Work : Monday - Friday

Travel Required : No

Salary Range: $34.95 - $57.65 / hourly; $72,975 - $120,373 / annually

Job Class Option : Information Security

Classified Status : Classified

Bargaining Unit/Union : 214 - MN Assoc of Professional Empl/MAPE

FLSA Status : Exempt - Administrative

Telework Eligible : Yes #LI-Hybrid

Designated in Connect 700 Program for Applicants with Disabilities (https://mn.gov/mmb/careers/diverse-workforce/people-with-disabilities/connect700/) : Yes

Make a difference in the lives of Minnesotans.The work you’ll do is more than just a job. Join the talented, engaged and inclusive workforce dedicated to creating a better Minnesota.Join the 2,500+ professionals of Minnesota IT Services (https://mn.gov/mnit/) (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.As the Information Security Engineer (ISE), you will assume an advanced technical role within the Enterprise security office Threat and Vulnerability Management Unit (TVMU).The ISE will serve as technical security specialist for the TVMU and perform a variety of duties to help support the technical system and tools. Responsibilities will include configuring and managing vulnerability scanning systems and technologies; configuration multiple scan configurations, policies across multiple organizations and networks; engineering technical solutions to help support the team, providing effectiveness and efficiency. Other responsibilities will include automating and scripting technical tasks across multiple systems and databases. Finally, the position may execute tasks around vulnerability assessment on system platforms and applications, and work with application and system owners on remediation efforts.This position is currently eligible for full-time telework:

Telework (https://mn.gov/mmb-stat/policies/1422-telework.pdf) for Minnesota IT Services allows an employee to perform work from a telework location and an employee may be required to be in the office based on business needs and other dependencies in St. Paul, Minnesota.

Only candidates located in Minnesota and bordering states (Iowa, North Dakota, South Dakota, or Wisconsin) are telework eligible.

Minimum QualificationsCandidates must clearly demonstrate all of the following qualifications in their resume:Position requires a minimum of four (4) years of experience in a progressive information security role.Experience must include:

Experience working with enterprise class vulnerability management systems.

Experience conducting vulnerability assessments and application security assessments.

Experience with scripting languages, databases and reporting applications.

Experience working across diverse business lines to resource and monitor remediation efforts to ensure compliance policies and standards or regulations.

Experience training end users on how to use enterprise software.

Ability to deliver effective verbal or written messages that facilitate a mutual understanding on both parties.

Customer service skills that include active listening, empathy, and problem-solving.

A master’s degree in Information Technology or an IT related field substitutes for three (3) years of experience, OR an IT related bachelor’s degree substitutes for two (2) years, OR an IT related associate’s degree substitutes for one (1) year.Preferred Qualifications

Experience conducting in-depth security assessments on computer systems and applications.

Knowledge and experience working with Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE), and exploits.

Experience with Security Risk Management Framework, such as NIST.

Experience working with Microsoft and Linux Operating Systems.

Programming and scripting with experience with one or more languages: Java, .NET, Python, Powershell.

Experience with cloud technologies and processes, such as Microsoft Azure.

Ability to communicate complex security requirements and solutions to both technical and non-technical internal and external customers, agency staff, vendors, and other governmental agencies.

Ability to prepare and conduct presentations and training classes on computer security policies, procedures, and guidelines, requirements, and system solutions.

Leadership and project management skills.

Additional RequirementsIt is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

SEMA4 Records Check (applies to current and past state employees only)

Criminal History Check

Reference Check

Social Security and Address Verification

Education Verification

CJIS Background Check

Other legally required checks

Minnesota IT Services will not sponsor applicants for work visas. All applicants must be legally authorized to work in the United States.AN EQUAL OPPORTUNITY EMPLOYERMinnesota State Colleges and Universities is an Equal Opportunity employer/educator committed to the principles of diversity. We prohibit discrimination against qualified individuals based on their race, sex, color, creed, religion, age, national origin, disability, protected veteran status, marital status, status with regard to public assistance, sexual orientation, gender identity, gender expression, or membership in a local commission as defined by law. As an affirmative action employer, we actively seek and encourage applications from women, minorities, persons with disabilities, and individuals with protected veteran status.Reasonable accommodations will be made to all qualified applicants with disabilities. If you are an individual with a disability who needs assistance or cannot access the online job application system, please contact the job information line at 651-259-3637 or email careers@state.mn.us . Please indicate what assistance is needed.

Related jobs

  • Working Title: End-User/Endpoint Technician

  • Who Are We?

  • Security Risk and Compliance Analyst will operate within a divisional security team reporting to the Director of Information Security. Analyst will be responsible for risk assessment, reporting and audit of Customer facing applications supporting the Tax and Accounting (TAA) and Corporate Performance (CP&ESG) application portfolio. Primary responsibilities will include maintaining compliance and assurance against established security frameworks including SO2 and ISO27001. Analyst will work on annual certification requirements and daily IT security tasks. IT Risk assessment and documentation and assessment of implemented security policies and standards will be a core focus of this position. Analyst will perform a wide range of security tasks to monitor and support the Confidentiality, Integrity, and Availability of applications.

  • At Trane Technologies TM and through our businesses including Trane ® and Thermo King ® , we create innovative climate solutions for buildings, homes, and transportation that challenge what’s possible for a sustainable world. We\'re a team that dares to look at the world\'s challenges and see impactful possibilities. We believe in a better future when we uplift others and enable our people to thrive at work and at home. We boldly go.

  • Description

Job Details

Jocancy Online Job Portal by jobSearchi.