Job description

These positions are only open to Internal King County employees. Only current King County employees will be considered. The King County Information Technology (KCIT) Security and Privacy team is hiring an IT Security Engineer . This position will work alongside Security Analysts, Engineers and Architects to manage and deploy security controls, services and technologies used to identify, protect, detect and respond to threats that could impact the delivery of King County services. Specific responsibilities of this position include (but are not limited to) evaluating telemetry, hunting for threats, troubleshooting security technology issues, responding to incidents and managing service requests from County departments. Additionally, the IT Security Engineer will play a critical role in the cohesiveness and performance of IT security technology platforms, processes and procedures, including the creation and deployment of automation to improve detection/response and IT security service provisioning capabilities. About King County Department of Information Technology (KCIT) King County is committed to being the best-run government in the nation, and King County Information Technology (KCIT) is helping lead that transformation. KCIT harnesses the power of technology to modernize operations, advance digital equity and social justice, and deliver innovative solutions that engage, empower, and serve our residents, businesses, and community partners. Recognized by the National Association of Counties (NACo) for excellence in vision, strategy, innovation, and collaboration, KCIT is focused on delivering smart, secure, and customer-centered technology services that strengthen county operations and support thriving, resilient communities. As the technology business partner to all 18 County departments, KCIT provides the foundational systems and services that power many of the region’s most essential functions. We work side-by-side with our partners to design and deliver technology solutions that enhance customer experience and advance King County’s mission. Learn more about KCIT at: kingcounty.gov. This recruitment may be used to fill additional vacancies that may occur. • Monitor security technologies, service & incident queues, and telemetry. Respond to security/identity alerts, events, and incidents. • Conduct proactive threat hunting to Identify and remediate vulnerable technologies, applications, and configurations. • Triage and respond to security incidents independently and/or in a group setting. • Provision security and identity services and deliver level 1 break/fix support for King County security platforms/services. • Responsible for operational performance, monitoring, and documentation of assigned security technologies and services. Assist with the onboarding and offboarding of security and identity technologies and services. • Responsible for cohesiveness and performance of operational platform processes and procedures. Works directly with Security Operations Manager and Security Architecture to identify and implement automation strategies that increase operational performance and integrate technologies to improve service provisioning and detection/response capabilities. • Create and maintain technical documentation, troubleshooting guides, and standard operating procedures for security, and security-related technologies. • Serve as an escalation point for tier 1 & 2 security-related help requests. • Develop and/or improve technical solutions and tools and automate repeatable tasks. • Provide backup support for investigations and vulnerability management • Participate in After Hours Support (AHS) rotation. • Perform other duties as assigned. • Two years or more experience in IT Security and/or Identity engineering or relevant field. • Two years or more in IT service desk operations and/or general IT support. • Demonstrated knowledge of information security principles and best practices. • Knowledge of computer networking concepts and protocols, and network security methodologies. • Demonstrated knowledge and experience in broad areas of technology including but not limited to Active Directory, Windows Server, Windows Desktop, Linux, encryption, access control, and endpoint protection. • Demonstrated knowledge and experience in one or more programming or scripting languages, such as PowerShell, Python, JavaScript, C#, or other(s). • Demonstrated knowledge and experience querying and analyzing log data. • Knowledge and ability to keep abreast of new and emerging information technology and security technologies. • Knowledge of information classification concepts and procedures for information compromise. • Strong time management and organizational skills. Desired • SANS GIAC Certifications • CCNA/CCNP Security • Advanced Enterprise Technology Certifications • Advanced Cloud Technology Certifications • Other relevant certifications Hybrid Work: KCIT works in a hybrid model, with days in the office as well as telecommuting. The ratio of remote to onsite work will be dependent on business needs and is subject to change. The primary onsite location is the Chinook Building, 401 5th Ave, Seattle, WA 98104. Employees must reside in Washington state and within a reasonable distance to their King County worksite to respond to workplace reporting requirements. King County has a robust collection of tools and resources to support working remotely. The individual selected for this opportunity will join an innovative and progressive team that is redefining how we work as we transition to the department's hybrid environment. Employees will be provided with a County-issued laptop and must maintain a home workspace with an internet connection where they can reliably perform work and remain available and responsive during scheduled work hours. Work Schedule: The normal workweek for this position is Monday through Friday, 8:00 a.m. to 5:00 p.m. Alternative schedules may be considered by your manager. This position will participate on the After-Hours Support (AHS) team rotating across a pool of 12 to 15 staff (24x7, 7-day rotation Monday-Sunday). FLSA Status: This position is FLSA Exempt and is not eligible for overtime pay. Classification: IT Production Engineer (Job code: 741501) Union: This position is represented by Protec17: Information Technology. Who May Apply: This recruitment is open to only current internal King County employees at this time. We value diversity, diverse perspectives and life experience and encourage people of all backgrounds to apply. Are you ready to make a difference? Come join the team dedicated to serving one of the nation's best places to live, work and play. Application Process Applicants must complete the online application to include: • Employment history going back at least seven years if possible (or more to include all relevant experience). • A resume including all relevant experience. If you are interested in pursuing this position and supporting King County’s vision for unified, equitable, and high-performing government, please follow the application instructions carefully. Provide us with your work history as applicable, ensuring that you provide details that highlight your ability to fulfill the requirements for this position. If you need this announcement in an alternate language or format, or you would like to request accommodation or assistance in the application or assessment process, please contact Angelia Remolana at aremolana@kingcounty.gov King County's Vision, Mission, and ACTIVATE Values unite us. King County serves residents with a relentless sense of urgency, delivering on commitments with transparency and accountability. We are action-oriented, creative problem solvers who collaborate across roles, engage directly with communities, and challenge the status quo to achieve meaningful impact. As a unified team, we uphold high ethical and stewardship standards, embrace change, stay curious, and continuously improve. Across all interactions, we listen first, act quickly, and stay aligned as a team to earn and sustain public trust. Learn more about our Vision, Mission, and ACTIVATE Values here and visit our Why work at King County page here . King County is an Equal Employment Opportunity (EEO) Employer No person is unlawfully excluded from employment opportunities based on sex, race, color, national origin, ethnicity, religious affiliation, disability, sexual orientation, gender identity or expression, age except by minimum age and retirement provisions, pregnancy, status as a family caregiver, parental status, marital status, military status or status as a veteran who was honorably discharged or who was discharged solely as a result of the person's sexual orientation or gender identity or expression, citizenship or immigration status, genetic information, or other protected class. However, to the extent that distinction or differential treatment on the basis of citizenship or immigration status is authorized by either federal or state law, regulation, or government contract, it is not an unfair practice. Our EEO policy applies to all employment actions, including but not limited to recruitment, hiring, selection for training, promotion, transfer, demotion, layoff, termination, rates of pay or other forms of compensation.

Requirements

Must-haves

These positions are only open to Internal King County employees. Only current King County employees will be considered.
About King County Department of Information Technology (KCIT)
This recruitment may be used to fill additional vacancies that may occur. • Monitor security technologies, service & incident queues, and telemetry. Respond to security/identity alerts, events, and incidents.
Conduct proactive threat hunting to Identify and remediate vulnerable technologies, applications, and configurations.
Triage and respond to security incidents independently and/or in a group setting.
Provision security and identity services and deliver level 1 break/fix support for King County security platforms/services.
Responsible for operational performance, monitoring, and documentation of assigned security technologies and services. Assist with the onboarding and offboarding of security and identity technologies and services.
Create and maintain technical documentation, troubleshooting guides, and standard operating procedures for security, and security-related technologies.
Serve as an escalation point for tier 1 & 2 security-related help requests.
Develop and/or improve technical solutions and tools and automate repeatable tasks.
Provide backup support for investigations and vulnerability management
Participate in After Hours Support (AHS) rotation.
Perform other duties as assigned.
Two years or more experience in IT Security and/or Identity engineering or relevant field.
Two years or more in IT service desk operations and/or general IT support.
Demonstrated knowledge of information security principles and best practices.
Knowledge of computer networking concepts and protocols, and network security methodologies.
Demonstrated knowledge and experience in broad areas of technology including but not limited to Active Directory, Windows Server, Windows Desktop, Linux, encryption, access control, and endpoint protection.
Demonstrated knowledge and experience in one or more programming or scripting languages, such as PowerShell, Python, JavaScript, C#, or other(s).
Demonstrated knowledge and experience querying and analyzing log data.
Knowledge and ability to keep abreast of new and emerging information technology and security technologies.
Knowledge of information classification concepts and procedures for information compromise.
Strong time management and organizational skills.
Desired • SANS GIAC Certifications

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonjavascript

Platform: governmentjobs
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Pto