IT Security Engineering II or III

Protect Critical Infrastructure. Defend What Matters.

Full-Time Exempt | Mid to Senior Level | Growth Opportunity

Cyber threats are evolving. Critical infrastructure is increasingly targeted. At Benton PUD, security isn’t just an IT function — it’s a public trust.

We are looking for a highly motivated, technically elite IT Security Engineer who is passionate about cybersecurity, IT/OT environments, network architecture, and physical security systems. This is a leadership-level role responsible for safeguarding essential services that power and support our community.

This is more than a job — it’s a mission. You’ll work alongside professionals who care deeply about protecting essential services and strengthening infrastructure that thousands rely on every day.

If you’re a security professional who thrives on challenge, takes ownership of risk mitigation, and wants to help keep Benton PUD safe from emerging threats — we encourage you to apply.

Join us. Protect what powers our community.

The primary purpose of this position is to support or lead the District’s cyber and physical security programs with a strong emphasis on Cybersecurity. This role is responsible for designing, implementing, and maintaining secure architectures that protect Benton PUD’s IT, OT, and physical infrastructure. The IT Security Engineer II or III serves as a technical authority for enterprise security systems, ensuring resiliency, compliance, and risk reduction across digital and physical environments, including substations, facilities, networks, systems, and critical infrastructure;

developing and carrying out information and physical security plans and policies.

• Support the District’s mission to serve our customers and foster a positive workplace by personally choosing behavior aligned with our values and ethical code.
• Monitor, audit, and execute security controls and tools to maintain network security by identifying potential security issues to include performing network security threat/impact assessments and scans, recommending security measures, installing and monitoring security devices, and installing patches, and updates as needed; lead mitigation efforts to remediate discovered security deficiencies.
• Manage the risk of security exposure or compromise within District systems by providing awareness training on information security standards, policies and best practices.
• Participate as a key member of the Security Incident Response Team by leading investigations and incident response activities, ensuring IR plan is followed and liaising with external support entities such as E-ISAC, DHS, PURMS, etc., as appropriate.
• Provide guidance and recommendations to ensure the security and resiliency of the converged IT/OT and physical security systems.
• Ensure a resilient network infrastructure by supporting implementation and securing design principles in network infrastructure and helping establish and verify secure network components and secure communications channels as per design.
• Establish and maintain logging, monitoring, alerting, and threat-hunting capabilities across cyber and physical security platforms. Monitor and respond to notifications or indications of compromise.
• Ensure resiliency of secure network authentication and access by supporting design and implementing appropriate encrypted communication methods.
• Develop, review and assist CISO in standards and policies for cybersecurity practices in both IT and OT environments, working closely with other stakeholders and groups to build out best practices and manageable criteria for increasing security posture.
• Oversee and technically manage enterprise physical security systems including access control systems (ACS), surveillance cameras, intrusion detection, duress/panic systems, and emergency notification platforms.
• Ensure the District achieves and maintains mandated compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), NERC CIP, and PCI-DSS by supporting implementation of a comprehensive network security architecture and adhering to internal District security policies.
• Perform vulnerability…