L&I IT Security Vulnerability Management - Journey

In this highly specialized position, you’ll lead the configuration, implementation, and optimization of advanced security solutions that protect our systems, networks, and data. Your expertise will directly support a robust IT security program focused on maintaining the confidentiality, integrity, and availability of mission-critical resources.

You’ll be at the forefront of cybersecurity-proactively planning, analyzing, and enhancing security policies, tools, and procedures that empower staff and strengthen our defenses. This role goes beyond maintenance; you’ll continuously assess and monitor complex environments to uncover vulnerabilities and drive meaningful corrective action before risks become threats.

As a trusted Security Engineer, you’ll take ownership of identifying and prioritizing vulnerabilities across a diverse technology landscape, including on-premise, hosted, and cloud-based systems. Your work will be essential in mitigating risks that could otherwise lead to system breaches or data compromise.

You’ll also serve as a key advisor, partnering with IT leadership, technical teams, vendors, and contractors to provide expert guidance on security risks and solutions, ensuring that security is embedded into every layer of our operations.

If you’re passionate about cybersecurity, thrive in a dynamic environment, and want to make a tangible impact, this is your opportunity to step into a role where your skills truly matter.

Duties

Some of what you will be doing * Vulnerability Management, including:

• Configure the vulnerability assessment tools to match L&I standards and Center for Internet Security ( CIS)
• Create, implement, and follow procedures for vulnerability scanning
• Perform on demand scans for newly implemented systems
• Create Key Performance Indicator (KPI) reports and recommend enterprise mitigation strategies

• Analyze vulnerabilities to determine impact to our environment, eliminate false positives, research and articulate business impact to the agency.

• Develop vulnerability tests. risk analysis and security assessments
• Prioritize vulnerabilities and risks
• Identify trends and enterprise problem areas
• Test new L&I systems and applications for vulnerabilities before they go live.
• Security Consulting, including:
• Security consultant to L&l business areas and L&I IT staff and IT leadership

• Translate technical security concepts for customers and audiences with differing levels of technical understanding.

• Security Monitoring/ Response, including:

• Analyze, research and assess agency risk using ITSS security defenses and services and determine appropriate response

• Develop, design, implement and provide requirements to Tier 1 and Tier 2 personnel
• Coordinate threat containment and remediation activities with the system owner(s).
• Manage Security Awareness training program, including:
• PhishFirewall - Act as the administrator
• Analyze requests for new Access Control Lists
• Propose Security Awareness training curriculum
• Research and propose security training content
• Project Management & New Solution implementation, including:
• Managing work breakdown structures and coordinating work efforts with other teams

• Develop, design, and implement new processes and technology to keep the risks to our systems and vulnerabilities low, * For positions requiring travel, you must have a valid unrestricted driver’s license and have insurance if driving a privately owned vehicle on state business.

• This position is represented by the Washington Federation of State Employees (WFSE).
• Candidates who are offered a job with L&I must possess work authorization that does not require sponsorship by the employer for a visa now or in the future.
• The Department of Labor & Industries complies with the employment eligibility verification requirements of the federal employment eligibility verification form, I-9. The selected candidate must be able to provide proof of identity and eligibility to work in the United States consistent with the requirements of that form on the first day of employment.
• Please note: L&I may use this announcement to fill multiple permanent and/or non-permanent positions.

Do you have experience in Research?, Do you have a Associate’s degree?, Required

• Six years of IT experience with at least two years of IT Security experience

OR

• A bachelor’s degree in information technology, Information Assurance, Computer Science and two (2) years of IT experience with at least one (1) year of IT Security experience.

OR

• An associate’s degree in information technology, Information Assurance, Computer Science and four (4) years of IT experience with at least one (1) year of IT Security experience.

**For this role, IT Security Experience must include experience in two or more of the following security technologies:

• Digital Forensics * User Management
• General Cybersecurity * Network Security
• Security Assessments * Desktop Security
• Identity & Access Management * Access Control
• Security Gateway Management * Vulnerability or Threat Management

Desired Formal security training or certifications, such as:

• Certified Information Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• IT Security or Information Assurance College Courses., To learn more about our hiring process timeline at L&I please visit our L&I recruiting page at Hiring Process at L&I. If you would like to read our website in a language other than English, scroll up to the top of the page to select your language of choice from the banner.

3.43.4 out of 5 stars Tumwater, WA Hybrid work $84,120 - $113,148 a year - Full-time, Pulled from the full job description

• Flexible schedule

To help you maintain a proper work-life balance, teleworking is one of the work schedule options for this position. L&I also offers flexible custom work schedules. We offer hybrid and remote work options. Remote work from a state outside of WA requires approval. State employees who meet the qualifications will become eligible for a generous retirement package at the end of the employee’s career. Click on the “Benefits” tab to learn more. At L&I, your voice matters. In addition, L&I is a diverse state agency dedicated to the safety and health and security of Washington’s 3.3 million workers. Take a look at this brief video and learn more about why L&I is an employer of choice., Washington is America’s Top State to live, play, and work, according to U.S. News (2021). Join the L&I team and enjoy all the Evergreen State has to offer. In addition to offering a positive balance between life and work, L&I provides one of the most competitive benefits packages in the nation. We also believe your voice matters. We value our employees and their work-life balance by encouraging flexible schedules. L&I is a diverse state agency dedicated to the safety and health and security of Washington’s 3 million workers. Veterans Preference Applicants wishing to claim Veterans Preference should attach to their application a copy of their DD-214 (Member 4 copy), NGB 22, or signed verification of service letter from the United States Department of Veterans Affairs. Please blackout any personally identifiable data such as Social Security numbers. For further information, contact L&I’s Jobs@lni.wa.gov. Diversity, Equity, and Inclusion Employer L&I employees come from all walks of life. We strive to hire great people from a wide variety of backgrounds. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We believe in the importance of recognizing the value each of us contribute to the success of the agency mission. Having a diverse workforce is this agency’s greatest resource of strength and knowledge. It is through the combination of talents and abilities that we can pursue finding effective measures to provide the best customer service. We are committed to building a diverse and inclusive workplace for everyone and we strongly mean everyone. The State of Washington is an equal opportunity employer. Persons with a disability who need accommodation in the application process or testing process, or those needing this announcement in an alternative format, may call 360-902-5700. TTY users should first call 711 to access the Washington Relay Service. You are welcome to include the name and pronoun you would like to be referred to in your materials, and we will honor this as you interact with our award-winning diverse and inclusive organization.