L&I IT Security Vulnerability Management - Journey

Description

Our Mission: Keep Washington Safe and Working!

Our Values: Customer Focus, One L&I, Respect, Diversity, Equity and Inclusion, Learning and Growth, Reliability

Join us as a Journey-Level IT Security Engineer and play a critical role in safeguarding the technology that powers our agency.

In this highly specialized position, you’ll lead the configuration, implementation, and optimization of advanced security solutions that protect our systems, networks, and data. Your expertise will directly support a robust IT security program focused on maintaining the confidentiality, integrity, and availability of mission-critical resources.

You’ll be at the forefront of cybersecurity—proactively planning, analyzing, and enhancing security policies, tools, and procedures that empower staff and strengthen our defenses. This role goes beyond maintenance; you’ll continuously assess and monitor complex environments to uncover vulnerabilities and drive meaningful corrective action before risks become threats.

As a trusted Security Engineer, you’ll take ownership of identifying and prioritizing vulnerabilities across a diverse technology landscape, including on-premise, hosted, and cloud-based systems. Your work will be essential in mitigating risks that could otherwise lead to system breaches or data compromise.

You’ll also serve as a key advisor, partnering with IT leadership, technical teams, vendors, and contractors to provide expert guidance on security risks and solutions, ensuring that security is embedded into every layer of our operations.

If you’re passionate about cybersecurity, thrive in a dynamic environment, and want to make a tangible impact, this is your opportunity to step into a role where your skills truly matter.

Duties

Some Of What You Will Be Doing

• Vulnerability Management, including:
• Configure the vulnerability assessment tools to match L&I standards and Center for Internet Security ( CIS)
• Create, implement, and follow procedures for vulnerability scanning
• Perform on demand scans for newly implemented systems
• Create Key Performance Indicator (KPI) reports and recommend enterprise mitigation strategies
• Analyze vulnerabilities to determine impact to our environment, eliminate false positives, research and articulate business impact to the agency.
• Develop vulnerability tests. risk analysis and security assessments
• Prioritize vulnerabilities and risks
• Identify trends and enterprise problem areas
• Test new L&I systems and applications for vulnerabilities before they go live.
• Security Consulting, including:
• Security consultant to L&l business areas and L&I IT staff and IT leadership
• Translate technical security concepts for customers and audiences with differing levels of technical understanding.
• Security Monitoring/ Response, including:
• Analyze, research and assess agency risk using ITSS security defenses and services and determine appropriate response
• Develop, design, implement and provide requirements to Tier 1 and Tier 2 personnel
• Coordinate threat containment and remediation activities with the system owner(s).
• Manage Security Awareness training program, including:
• PhishFirewall - Act as the administrator
• Analyze requests for new Access Control Lists
• Propose Security Awareness training curriculum
• Research and propose security training content
• Project Management & New Solution implementation, including:
• Managing work breakdown structures and coordinating work efforts with other teams
• Develop, design, and implement new processes and technology to keep the risks to our systems and vulnerabilities low
  

Qualifications

Required

• Six years of IT experience with at least two years of IT Security experience
  
  

OR

• A bachelor's degree in information technology, Information Assurance, Computer Science and two (2) years of IT experience with at least one (1) year of IT Security experience.
  
  

OR

• An associate's degree in information technology, Information Assurance, Computer Science and four (4) years of IT experience with at least one (1) year of IT Security experience.
• For this role, IT Security Experience must include experience in two or more of the following security technologies:
• Digital Forensics
• User Management
• General Cybersecurity
• Network Security
• Security Assessments
• Desktop Security
• Identity & Access Management
• Access Control
• Security Gateway Management
• Vulnerability or Threat Management
  
  

Desired

Formal Security Training Or Certifications, Such As

• Certified Information Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• IT Security or Information Assurance College Courses.
  
  

Supplemental Information

Things You Need to Know

To help you maintain a proper work-life balance, teleworking is one of the work schedule options for this position. L&I also offers flexible custom work schedules. We offer hybrid and remote work options. Remote work from a state outside of WA requires approval .

State employees who meet the qualifications will become eligible for a generous retirement package at the end of the employee’s career. Click on the “Benefits” tab to learn more.

At L&I, your voice matters. In addition, L&I is a diverse state agency dedicated to the safety and health and security of Washington's 3.3 million workers. Take a look at this brief video and learn more about why L&I is an employer of choice.

To receive more information on opportunities at L&I sign up for GovDelivery and select L&I job alerts.

Application process

We will contact the top candidates directly to interview for this position. Because we base the selection on information provided by you, it is in your best interest to identify the knowledge, skills, and abilities that address the required and desirable qualifications described in the announcement.

Please Include The Following Documents With Your Application

• A cover letter describing specific qualifications.
• A current resume detailing applicable experience and education.
• A list of at least three professional references with current telephone numbers. *Please note: we will never call any reference without your written authorization.
  
  

Please do not attach or place any medical information (vaccination status included) within the application, resume, or cover letter. If you do, we will have to reject your application to safeguard others from receiving your confidential information. You will have to remove the confidential information before you can apply again.

Other Information

• IT position applicants that are selected to move forward in this hiring process will receive an email skills assessment invitation within 3 weeks of your application being accepted. An applicant may complete the assessment when ready, but the invitation to complete the assessment will expire 5 days after the invitation was sent. Once you start the assessment, you will be required to complete it. You cannot start your assessment and then come back to it later. Please look in your email inbox or spam as these invitations are sent by CodeSignal .
• For positions requiring travel, you must have a valid unrestricted driver's license and have insurance if driving a privately owned vehicle on state business.
• This position is represented bytheWashington Federation of State Employees (WFSE).
• Candidates who are offered a job with L&I must possess work authorization that does not require sponsorship by the employer for a visa now or in the future.
• The Department of Labor & Industries complies with the employment eligibility verification requirements of the federal employment eligibility verification form, I-9. The selected candidate must be able to provide proof of identity and eligibility to work in the United States consistent with the requirements of that form on the first day of employment.
• Please note: L&I may use this announcement to fill multiple permanent and/or non-permanent positions.
• Sign up for L&I Job Alerts to receive information about our newest openings: GovDelivery
  
  

To learn more about our hiring process timeline at L&I please visit our L&I recruiting page at Hiring Process at L&I . If you would like to read our website in a language other than English, scroll up to the top of the page to select your language of choice from the banner.

Background Check Notice

Prior to a placement in this position, a background check, including criminal history record will be conducted. Information from your background check will not necessarily preclude employment but will be considered in determining your eligibility to perform the requirements of the position.

Did You Know?

Washington is America's Top State to live, play, and work, according to U.S. News (2021). Join the L&I team and enjoy all the Evergreen State has to offer.

In addition to offering a positive balance between life and work, L&I provides one of the most competitive benefits packages in the nation. We also believe your voice matters. We value our employees and their work-life balance by encouraging flexible schedules. L&I is a diverse state agency dedicated to the safety and health and security of Washington's 3 million workers.

Veterans Preference

Applicants wishing to claim Veterans Preference should attach to their application a copy of their DD-214 (Member 4 copy), NGB 22, or signed verification of service letter from the United States Department of Veterans Affairs. Please blackout any personally identifiable data such as Social Security numbers. For further information, contact L&I’s [email protected] .

Diversity, Equity, and Inclusion Employer

L&I employees come from all walks of life. We strive to hire great people from a wide variety of backgrounds. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

We believe in the importance of recognizing the value each of us contribute to the success of the agency mission. Having a diverse workforce is this agency’s greatest resource of strength and knowledge. It is through the combination of talents and abilities that we can pursue finding effective measures to provide the best customer service. We are committed to building a diverse and inclusive workplace for everyone and we strongly mean everyone.

The State of Washington is an equal opportunity employer. Persons with a disability who need accommodation in the application process or testing process, or those needing this announcement in an alternative format, may call 360-902-5700. TTY users should first call 711 to access the Washington Relay Service.

You are welcome to include the name and pronoun you would like to be referred to in your materials, and we will honor this as you interact with our award-winning diverse and inclusive organization.

For more Information

If you have any questions regarding this job posting, program, or the agency, or to request a position description form, please contact Jason Stedman at [email protected] .