> Markdown version of [/jobs/ext/2229657-cybersecurity-engineer-security-engineering-security-operations](https://www.wearedevelopers.com/jobs/ext/2229657-cybersecurity-engineer-security-engineering-security-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - Security Engineering & Security Operations - **Company:** Tacoma Public Utilities - **Location:** Tacoma, WA, United States (Remote available) - **Experience:** Expert - **Salary:** $122,096.0 - $171,954.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Digital Assets, Internet Security, Python (Programming Language), Network Security, PCI Data Security Standards, Windows PowerShell, Security Software, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Scripting, Mitre Att&ck, Information Technology, Cybercrime - **Published:** August 25, 2026 - **Apply:** https://www.careersingovernment.com/job/2578747/senior-cybersecurity-engineer-security-engineering-security-operations/ ## About the Role The City of Tacoma is hiring up to two Senior Cybersecurity Engineers through a single, unified recruitment and interview process. Candidates will be considered for either the Security Engineering track or the Security Operations track based on their strengths, experience, and interests. You do not need to be an expert in both domains; we value depth in one track and collaboration across both. Candidates will not only need to be technically gifted but will require essential skills of communication, collaboration, mentorship, and teamwork., Minimum Education* Bachelor's degree in information technology, cybersecurity or directly related field Minimum Experience* 4 years of progressively responsible information technology experience related to assignment *Equivalency: 1 year of experience = 1 year of education Licensing, Certifications and Other Requirements: * Security+ or related certification (CISSP, SANS, GIAC, COMTIA) * As Assigned: Washington State Driver's License; some positions may require the ability to pass additional background checks and / or obtain additional certifications, with maintenance thereafter * On-call participation is required * Ability to obtain CJIS/HIPAA/PCI/NERC CIP access Knowledge & Skills Security Engineering Skills: * Secure design review and threat modeling * Security tool engineering (SIEM pipelines, identity systems, endpoint agents) * Configuration baselines and secure hardening * Vulnerability engineering and automation * Cyber supply chain assessment and vendor risk analysis * CIS/NIST RMF implementation * Scripting & Automation familiarity (Python/PowerShell) Security Operations Skills: * SIEM/SOAR administration and detection tuning * Endpoint security administration * Security investigations and incident response * Threat hunting and MITRE ATT&CK familiarity * Scripting familiarity (Python/PowerShell) * Communication, customer service, and collaboration skills ## Description Are you passionate about protecting critical public services and the systems that support them? Do you want to join a mission-driven cybersecurity team that values technical excellence, collaboration, and service to the community? If contributing to the security and resilience of a modern city appeals to you, this may be the opportunity you're looking for., Security Engineering Track * Conduct secure design reviews and threat modeling for new systems and major changes; identify risks, propose controls, and document decisions. * Engineer, deploy, integrate, and maintain cybersecurity tools such as SIEM pipelines, endpoint protection, identity security systems, and network security controls. * Develop and maintain secure configuration baselines across operating systems, cloud platforms, and network infrastructure; monitor drift and drive remediation. * Improve vulnerability management through engineering, ensuring scanning accuracy, coverage, asset associations, and workflow automation. * Define and strengthen identity security requirements, including MFA, privileged access pathways, and conditional access policies. * Perform cyber supply chain risk assessments for vendors, cloud services, data flows, and procurement processes. * Produce compliance evidence and publish technical standards to support CJIS/HIPAA/PCI/NERC CIP/RCW requirements. * Guide and mentor junior analysts and engineers in Security Engineering * Promote a customer service-oriented approach to Security Engineering. Security Operations Track * Design, tune, and manage SIEM/SOAR detection logic to improve alert fidelity and reduce false positives. * Lead incident response and event triage, classifying, investigating, containing, and coordinating remediation of security events. * Conduct proactive threat hunting across logs, endpoints, identities, and networks. * Own operational vulnerability management including scanning, validation, prioritization, ticketing, and reporting against SLAs. * Maintain and tune security tools including EDR, SOAR, email security filters, and log pipelines. * Onboard log sources and verify telemetry quality, collaborating with IT owners to resolve data gaps. * Develop SOC procedures and operational standards, producing reports and compliance evidence. * Guide and mentor junior analysts and engineers in Security Operations * Promote a customer service-oriented approach to Security Operations., Direct Deposit: Employees are paid on a bi-weekly schedule by direct deposit. Salary Increases: Based on satisfactory job performance, the City provides for a regular progression of salary increases for most classifications according to the salary schedule. Union Affiliation: Many job classifications are covered by union security provisions which require union membership, dues, or payment of equivalent service fees. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)