SouthHillRecruiter Since 2001
the smart solution for South Hill jobs

Senior Security Analyst

Company: State of Washington
Location: Olympia
Posted on: April 19, 2024

Job Description:

Salary : $91,776.00 - $123,468.00 Annually

Location : Thurston County - Olympia, WA

Job Type: Full Time - Permanent

Job Number: 2024-02541

Department: Office of Financial Management

Division: Information Technology Services

Opening Date: 04/03/2024

Description

Note: Our office is located in Olympia WA. Telecommuting is available, but you must be able to come into the office when necessary. We will strive to give reasonable notice.

This position has been allocated as an IT Security - Senior/Specialist

What this job is about
This is an exciting opportunity to work with and support the Office of Independent Investigations (OII). As the Senior Security Analyst, you provide technical expertise for security access management, regulatory compliance, security policy, and manager our application-level security compliance. You also provide consultation on analyzing, assessing, and designing applications - layer security controls. You will conduct risk and security assessments and evaluate existing controls so that you can recommend mitigation to associated risks.

Our division supports the state's enterprise applications which are used by state agencies, higher education institutions, Office of Financial Management (OFM), and the Office of the Governor.

Who we are
Our work at the Office of Financial Management serves as a crucial part of the decision-making that the governor, Legislature and state agencies do each year. As an employee of OFM, you will be part of a team of dedicated professionals who work every day to provide vital information, fiscal services, policy support and technology services to the governor, Legislature and state agencies.

Working alongside policy experts and researchers in areas such as education, climate change, natural resources, social supports, and public health, you get to see how the governor, Legislature and state agencies use our work to serve the people of Washington.
If being part of legislative and policy change matters to you, you've found the right agency.

What we offer our employees
We support the following values in the workplace:

  • Foster an environment of diversity, equity and inclusion. We strive to hire, cultivate and retain a competitive workforce that reflects the communities we serve.
  • Encourage a healthy life/work balance by offering flexible/alternative work schedules, wellness activities, mobile arrangements and telework opportunities.
  • Modernize our work environment by thinking outside the cubicle and providing workspaces that promote creative collaboration, drive efficiency, and best suit the important work we do.
  • Offer an Infants at Work Program to promote parent and infant bonding, parental well-being and healthy infant development. Depending on your job duties, work location and supervisor approval, eligible employees who are new mothers, fathers or legal guardians can bring their infant (six weeks to six months) when they return to work. Duties

    What you'll be doing:
    • Creating, implementing, and administering a comprehensive risk analysis plan to analyze vulnerabilities, threats, and impacts on the Department's information systems.
    • Analyzing risk analysis results. Producing reports with recommended administrative and technical solutions to mitigate risk.
    • Overseeing implementation of risk analysis mitigation solutions and provide technical expertise and consultation for stakeholders.
    • Collaborating with the CISO, LASO and Incident Manager to communicate, troubleshoot, and resolve security vulnerabilities, risk and incidents.
    • Researching best methods and tools to probe and assess Department information systems for compliance and architect processes and methods to conduct a comprehensive vulnerability analysis of the systems.
    • Using complex security tools and appliances, probe Department information systems to validate compliance on system architecture, application configuration, patch management, access management, and other essential processes.
    • Researching current and emerging threats and architect risk analysis methods to expose and mitigate the threats.
    • Researching current and emerging vulnerabilities and architect risk analysis methods to expose and mitigate the vulnerabilities.
    • Researching State and Federal information system regulations and architect methods and processes to validate Department information system compliance.
      Qualifications

      Required:
      • A Bachelors degree or higher in Information Secuirty or related field from an accredited institution whose accreditation is recognized by the U.S. Department of Education or the Council for Higher Education Accreditation (CHEA), or a foreign equivalent. OR
        • A professional security certification, such as CISSP, CISA, Security+, or CEH, from a non-vendor specific industry recognized organization such as ISC2, ISACA, or the SANS institute. AND
          • Demonstrated 5 years' experience and expert proficiency in risk analysis, security assessments, and vulnerability analysis. Desired:
            • A Masters degree in computer science or related field to information management or information security from an accredited institution whose accreditation is recognized by the U.S. Department of Education or the Council for Higher Education Accreditation (CHEA), or a foreign equivalent.
            • Demonstrated experience in configuring, conducting, and analyzing vulnerability scans, or computer forensics.
            • Demonstrated experience analyzing system access and use in compliance with security frameworks including but not limited to NIST and CJIS.
            • Knowledge of OCIO, CJIS CIS, NIST, FERPA, HIPAA, FISMA and FedRAMP frameworks.

              Supplemental Information

              How to apply
              Interested? We would love to hear from you. Click "Apply" at the top of this page to start your application (you can save the application and come back to it, if needed).

              Please include the following along with your application:
            • Letter of interest that describes your specific qualifications.
            • Current resume that details your applicable experience and education.
            • A list of at least three professional references with current telephone numbers. We will directly contact the top candidates to interview for this position. Because we base our selection on the information you provide, it is in your best interest to identify the knowledge, skills and abilities that address the required and desirable qualifications we described above.

              Questions?
              For questions about this recruitment or to request reasonable accommodation in the application process, please email Leila at TalentAcquisition@ofm.wa.gov. For TTY service, please call the Washington Relay Service at 7-1-1 or 1-800-833-6388

              The Office of Financial Management is an equal opportunity employer. We strive to create a working environment that includes and respects cultural, racial, ethnic, sexual orientation and gender identity diversity. Women, racial and ethnic minorities, persons of disability, persons over 40 years of age, and disabled and Vietnam-era veterans are encouraged to apply. If you need accommodations or help in the application process, or who wish to receive this job announcement in an alternative format, you may call 360-725-0158 or dial 711 to reach the Telecommunications Device for the Deaf system.

              More than Just a Paycheck!
              Employee benefits are not just about the kind of services you get, they are also about how much you may have to pay out of pocket. Washington State offers one of the most competitive benefits packages in the nation.

              We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. That's why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs.

              Read about our benefits:
              The following information describes typical benefits available for full-time employees who are expected to work more than six months. Actual benefits may vary by appointment type or be prorated for other than full-time work (e.g. part-time); view the job posting for benefits details for job types other than full-time.

              Note: If the position offers benefits which differ from the following, the job posting should include the specific benefits.

              Insurance Benefits
              Employees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state.

              Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax-deferred dollars toward their health care expenses. Employees are also covered by basic life and long-term disability insurance, with the option to purchase additional coverage amounts.

              To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs.

              Dependent care assistance allows the employee to save pre-tax dollars for a child or elder care expenses.

              Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction.

              The Washington State Employee Assistance Program promotes the health and well-being of employees.

              Retirement and Deferred Compensation
              State Employees are members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems' web site.

              Employees also have the ability to participate in the Deferred Compensation Program (DCP). This is a supplemental retirement savings program (similar to an IRA) that allows you control over the amount of pre-tax salary dollars you defer as well as the flexibility to choose between multiple investment options.

              Social Security
              All state employees are covered by the federal Social Security and Medicare systems. The state and the employee pay an equal amount into the system.

              Public Service Loan Forgiveness
              If you are employed by a government or not-for-profit organization, and meet the qualifying criteria, you may be eligible to receive student loan forgiveness under the Public Service Loan Forgiveness Program.

              Holidays
              Full-time and part-time employees are entitled to paid holidays and one paid personal holiday per calendar year.

              Note: Employees who are members of certain Unions may be entitled to additional personal leave day(s), please refer to position specific Collective Bargaining Agreements for more information.

              Full-time employees who work full monthly schedules qualify for holiday compensation if they are employed before the holiday and are in pay status for at least 80 nonovertime hours during the month of the holiday; or for the entire work shift preceding the holiday.

              Part-time employees who are in pay status during the month of the holiday qualify for the holiday on a pro-rata basis. Compensation for holidays (including personal holiday) will be proportionate to the number of hours in pay status in the month to that required for full-time employment, excluding all holiday hours. Pay status includes hours worked and time on paid leave.

              Sick Leave
              Full-time employees earn eight hours of sick leave per month. Overtime eligible employees who are in pay status for less than 80 hours per month, earn a monthly proportionate to the number of hours in pay status, in the month to that required for full-time employment. Overtime exempt employees who are in pay status for less than 80 hours per month do not earn a monthly accrual of sick leave.

              Sick leave accruals for part-time employees will be proportionate to the number of hours in pay status, in the month to that required for full-time employment. Pay status includes hours worked, time on paid leave and paid holiday.

              Vacation (Annual Leave)
              Full-time employees accrue vacation leave at the rates specified in (1) or the applicable collective bargaining agreement (CBA). Full-time employees who are in pay status for less than 80 nonovertime hours in a month do not earn a monthly accrual of vacation leave.

              Part-time employees accrue vacation leave hours in accordance with (1) or the applicable collective bargaining agreement (CBA) on a pro rata basis. Vacation leave accrual will be proportionate to the number of hours in pay status, in the month to that required for full-time employment.

              Pay status includes hours worked, time on paid leave and paid holiday.

              As provided in , an employer may authorize a lump-sum accrual of vacation leave or accelerate the vacation leave accrual rate to support the recruitment and/or retention of a candidate or employee for a Washington Management Service position. Vacation leave accrual rates may only be accelerated using the rates established WAC 357-31-165.

              Note: Most agencies follow the civil service rules covering leave and holidays for exempt employees even though there is no requirement for them to do so. However, agencies are required to adhere to the applicable RCWs pertaining holidays and leave.

              Military Leave
              Washington State supports members of the armed forces with 21 days paid military leave per year.

              Bereavement Leave
              Most employees whose family member or household member dies, are entitled to three (3) days of paid bereavement leave. In addition, the employer may approve other available leave types for the purpose of bereavement leave.

              Additional Leave
              Leave Sharing

              Family and Medical Leave Act (FMLA)
              Leave Without Pay

              Please visit the State HR Website for more detailed information regarding benefits.

              Updated 12-31-2022

              01

              (OFM) Do you now, or will you in the future, require sponsorship for employment visa status (e.g., H-1B visa status, etc.) to work legally for our agency in the United States?
              • Yes
              • No

                02

                (OFM) I am legally authorized to work in the United States
                • Yes
                • No

                  03

                  I have the following educational or professional experience that qualifies me for this role:
                  • A Bachelors degree or higher in Information Security or related field.
                  • A Masters degree in computer science or related field to information management or information security.
                  • A professional security certification, such as CISSP, CISA, Security+, or CEH, from a non-vendor specific industry recognized organization such as ISC2, ISACA, or the SANS institute.
                  • None of the above apply.

                    04

                    I have five (5) or more years of experience and expert proficiency in risk analysis, security assessments, and vulnerability analysis.
                    • Yes
                    • No

                      05

                      I have the following additional qualifications or experience (select all that apply):
                      • Demonstrated experience in configuring, conducting, and analyzing vulnerability scans, or computer forensics.
                      • Demonstrated experience analyzing system access and use in compliance with security frameworks including but not limited to NIST and CJIS.
                      • Knowledge of OCIO, CJIS CIS, NIST, FERPA, HIPAA, FISMA and FedRAMP frameworks.
                      • None of the above apply.

                        06

                        (OFM 1 of 2) How did you first learn about this job opportunity?
                        • Word of mouth (e.g., friends, family, neighbor, etc.)
                        • OFM employee
                        • Other State employee
                        • Business Resource Group (BRG's)
                        • Career fair event
                        • Careers.wa.gov
                        • DeafNation
                        • Public job sites (e.g., Indeed, LinkedIn, Handshake, ZipRecruiter, Glassdoor, Monster, etc.)
                        • WorkSource Office or similar
                        • OFM website
                        • governmentjobs.com
                        • Other

                          07

                          (OFM 2 of 2) If you selected OFM or State employee, BRG, Career Fair event, or Other on the previous question, please list the name of the person and/or organization in the space below, otherwise type NA.

                          Required Question

Keywords: State of Washington, South Hill , Senior Security Analyst, Professions , Olympia, Washington

Click here to apply!

Didn't find what you're looking for? Search again!

I'm looking for
in category
within


Log In or Create An Account

Get the latest Washington jobs by following @recnetWA on Twitter!

South Hill RSS job feeds