330 IT Information Security Engineer I - Idaho...

We are currently seeking a talented IT Information Security Engineer I to join the Bureau of Criminal Identification. This position analyzes threat information from multiple sources, disciplines, and agencies across the intelligence community. The Information Security Engineer I synthesizes and places intelligence information in context, draws insights about the possible implications, identifies and executes counter measures, and performs related work.

PLEASE NOTE: The successful applicant will be required to complete a background investigation, polygraph examination and comply with our drug policy. Please review the ISP Professional Qualifications here (https://isp.idaho.gov/careers/qualifications-2/) .

EXAMPLE OF DUTIES:

• Coordinate agency Local Area Network (LAN) to ILETS access, documenting Points of Contact (POC); obtaining detailed network documentation and IT support information

• Conduct new agency on-site security reviews and report discrepancies or areas of concern

• Conduct ILETS technical security audits with reports and follow-ups

• Prepare and conduct initial and biennial statewide security awareness training (SATE) in accordance with the FBI Security Policy

• Manage statewide vendor access list for Law Enforcement agency use

• Assist in preparation and presentations for the annual ILETS Conference

• Serve as the Idaho State Police Deputy Local Agency Security Officer (LASO)

• Serve as the Idaho CJIS Systems Agency (CSA) Deputy Information Security Officer (ISO)/security point of contact to the FBI CJIS Division ISO in collaboration with the agency Technical Operations Manager:

• document technical compliance with the CJIS Security Policy to assure the confidentiality, integrity, and availability of criminal justice information to the Idaho user community

• document and provide assistance for implementing the security-related controls for ISP and its users

• establish a security incident response and reporting procedure to discover, investigate, document and report major incidents that significantly endanger the security or integrity of criminal justice information

• disseminate to user agencies, copies of ILETS security policies and guidelines

• communicate to user agencies information regarding current perceived security threats and providing recommended measures to address the threats

• • monitor use of the ILETS network either in response to information about a specific threat, or generally because of a perceived situation

• direct an interface agency, through its nominated contact, to rectify any omission in its duty of responsibility

• when an agency is unable or unwilling to co-operate, report the issue to the executive officer and initiate the procedure for achieving an emergency disconnection

• provide support and coordination for investigations into breaches of security

You must possess all the minimum qualifications below to pass the exam for this position. Please make sure your resume and work history supports your meeting the minimum qualifications for this position.

• Some knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection, etc.). Typically requires successful completion of academic coursework covering network security practices OR at least six months of work experience (within the last three years) participating as a team member performing network security or in a technical support/Help desk position with an emphasis on IT security issues.

• Some knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.). Typically requires successful completion of related college coursework OR six months of experience performing at least four of the above functions in a work environment.

• Some knowledge of host and network-based security technologies and how those products fit in the network security posture. Typically requires at least six months of experience (within the last three years) where you have obtained knowledge and demonstrated experience working with network-based security technologies in a production atmosphere OR completion of related college coursework.

• Some knowledge of evolving/emerging communication technologies and risks associated with them. Typically requires at least six months of experience with responsibility for IT system security oversight OR successful completion (within the last three years) of at least one, 3-credit college course covering IT security topics.

• Some knowledge of IT industry best-practices. Typically requires at least six months of work experience, successful completion of college or vocational-technical courses, in-service training, or vendor-sponsored training equivalent to 80 hours of instruction that dealt with computer trends, capabilities and terminology.

Desired qualifications:

• Experience in Law Enforcement Information Technology systems

• Knowledge of or practical experience implementing the FBI's CJIS Security Policy

The State of Idaho offers a robust total compensation package, including medical, vision, and dental insurance; PERSI retirement benefits; paid sick, vacation, and parental leave; and 11 paid holidays per year. For additional information related to benefits and/or State programs, please visit https://dhr.idaho.gov/StateEmployees/Benefits.html (https://statecareers.idaho.gov/pages/benefits) .*