Title: Information Security Engineer (00055)

State Role Title: Info Technology Specialist III

Hiring Range: $125,000

Pay Band: 6

Agency: Department of Elections

Location: Department of Elections

Agency Website: www.elections.virginia.gov

Recruitment Type: General Public - G

Job Duties

About the Agency
The Department of Elections promotes and supports accurate, fair, open and secure elections for the citizens of the Commonwealth. ELECT ensures the proper administration of election laws, campaign finance disclosure compliance, and voter registration processes in the state by promulgating rules, regulations, issuing instructions, and providing information to local Electoral Boards and general registrars.

The Department of Elections envisions a highly modern, efficient and professional electoral process that is trustworthy and accountable at all levels and engages Virginia’s diverse citizenry in the most fundamental right in a democratic society: the right to vote.

About the Position
The Information Security Engineer is responsible for the technical execution of information security activities within ELECT systems. The Information Security Engineer ensures ELECT systems maintain confidentiality, integrity and availability for all users. The Information Security Engineer, under the direction of the Director, Information Security, ensures ELECT systems meet federal, Commonwealth of Virginia and agency security standards. The position will work with various ELECT teams and security staff of the Commonwealth of Virginia to ensure security requirements are included in SDLC activities and infrastructure operations.

Minimum Qualifications

· Extensive knowledge of current information technologies and security practices.
· Architect, implement and maintain threat detection and protection of ELECT onsite and Cloud infrastructure.
· Experience in developing security design around infrastructure and security practices and consistently adhere to stringent compliance requirements and governance processes.
· Practical experience in programming languages including typical HTML, CSS, JavaScript, Python, etc. and Data Analytics.
· Working Knowledge of SIEM (Security Information Event Management) tools (ex: Manage Engine, Splunk, SolarWinds).
· Working Knowledge on Log Analyzer tools and performing regular system audits.
· Knowledge using patch management systems such as SCCM (System Center Configuration Manager).
· Practical experience with policy and regulatory mandates/security standards promulgated by the Virginia Information Technologies Agency (VITA) or the National Institute of Standards Technology (NIST).
· Knowledge with vulnerability assessments and penetration testing and associated mitigation strategies.
· Knowledge around threat attack vectors and mitigation techniques.
· Knowledge with the configuration and troubleshooting of network or data security related controls (encryption, digital signatures, secure boot, access control, password policy management).
· Expertise with Active Directory services, Windows domain infrastructure (with multiple domains), organizational units (OU) and server/user security through group policies.
· Experience in design reviews and change control for quality assurance on projects.
· Experience in acceptance testing of new releases and patches, providing technical feedback as appropriate.
· Knowledge of the Software Development Lifecycle (SDLC) and how to layer security into that process.
· Experience in the Agile Project Management Methodology.
· Knowledge to improve current procedures for monitoring and managing firewalls, security groups and roles.
· Keep the infrastructure current and recommend best practices and participate in continuous improvement of technologies and services in the security domain.
· Experience with incident response on security incidents and participate in business use case development and review/present information security design.
· Collaboration with cross-functional teams to achieve continuous improvement in cyber defense/resilience.
· Experience of industry secure coding standards to prevent common vulnerabilities such as SQL Injections, Cross Site Scripting, Open Redirect and other secure coding standards.
· Experience with data security, encryption at transit and rest, DLP and Governance auditing and best approaches to implement.
· Experienced in designing and architecting within multiple concurrent projects.

Other skills and abilities include:
o Critical thinking
o Active listening
o Judgment and decision making
o Complex problem solving
o Oral and written comprehension

Additional Considerations

Possess one or more information security certifications including: CISSP, CISM, CISA, CSSLP or other related certification highly preferred.

Experience in the following areas is a plus:

· Extensive experience working in an InfoSec program as a Security Engineer
· Strong software development skills
· Strong scripting skills
· Strong usability and interface design experience
· Expertise with JSON, AJAX, and Restful API design
· Experience in Java, .Net, Python
· Experience with SQL or other databases

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

Must have or be able to obtain a valid driver’s license.

Special Instructions to Applicants:
The Virginia Department of Elections is an equal opportunity employer, committed to diversity in the workplace. We do not discriminate on the basis of race, religion, color, sex, age, national origin or disability. Applicants who need accommodations for an interview should request this in advance by emailing debbie.wyattsmith@dhrm.virginia.gov. AmeriCorps, Peace Corps, and other National Service Alumni are encouraged to apply."

The selected candidate will have to complete a fingerprint based background check.

State employees who have been affected by Policy 1.30 Layoff and possess a valid Interagency Placement Screening Form (Yellow Card) or a Preferential Hiring Form (Blue Card) must submit the card BEFORE the closing date for this position. The card may be scanned and attached to the application or faxed to (804) 371-7401. Please include your name and the position number on the fax cover.

Contact Information

Name: Debbie Wyatt-Smith

Phone: 804-225-2007

Email: debbie.wyattsmith@dhrm.virginia.gov

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Each agency within the Commonwealth of Virginia is dedicated to recruiting, supporting, and maintaining a competent and diverse work force. Equal Opportunity Employer