IT Security Analyst - Journey; Lacey

___________________________

Job Title: IT Security Analyst – Journey

Location: Lacey, WA

Closes: October 26th, 2026, at 11:55pm PDT

Position: after onboarding and training this position is available for remote/partial telework/flexible schedule, some travel may occasionally be required. The default assigned work location of all Parks positions – both on-site and telework eligible positions – is within the State of Washington. Frequency of onsite work will vary based on business and operational needs

Washington State Parks is looking for a full time IT Security Analyst
- Journey (ISA) to join our team and play a critical role to help protect the systems, data, and technology services that support WA Parks mission, staff, and residents across the State.

This position is part of PARKS Information Security Office (ISO) within IT Services Department and reports to the Chief Information Security Officer (CISO). The role supports enterprise cybersecurity operations with a focus on vulnerability management, disaster recovery, secure system configuration, incident response support, and security‑driven technical administration. This is a hands‑on technical security position.

The position acts as the point of contact for both technical and process related security design, implementation, configuration, and support to other IT professionals and engineers in relation to systems and network defense. The ISA works closely with the Senior Specialist to implement, design, and maintain solutions and systems that meet the needs and requirements of the Parks overall IT Security Posture.

Leveraging guidance from the Senior Analyst and IT Architect this position will ensure policy and procedural compliance with both State level and Parks organizational IT security policy.

The successful candidate will work closely with IT operations, network infrastructure, compliance, and agency staff to identify risks, improve security posture, and support reliable technology services across Parks Enterprise. Join us and be part of an exciting, fast‑paced team dedicated to protecting vital systems that make a difference in Washington!

Duties include but are not limited to:

• Monitors, maintains, and configures systems related to risk, threat, and vulnerability management.
• Uses threat & vulnerability management tools to identify and remediate vulnerability from Parks infrastructure, often working with other teams and technical staff to develop plans of action to remediate the concerns in a timely fashion.
• Monitors Security Information and Event Management (SIEM) solutions, creating custom queries and alerts.
• Conducts assessments on agency systems ensuring compliance with overall IT security policy and identifies configuration changes that will improve security posture. Providing recommendations for remediation of findings.
• Provides technical resources and knowledge to internal and external Security Design Review (SDR) processes for systems, applications, IOT devices, and IT business solutions. Working under the guidance of the Senior Analyst to complete the required documentation and approval gates by using established SDR processes and tools established by OCS and Parks IT security Policy.
• Maintains ongoing and updated knowledge of current and emerging IT & Cyber Security policy and standards that have or will have a potential to impact Parks systems and business practices.
• Acts a subject matter expert and key resource for efforts to create baseline security standards and baselines for IT hardware & software, IOT devices, network & mobile devices, and cloud‑based solutions.
• Attends and actively participate in WaTech Security Operations Center (SOC), Office of Cyber Security (OCS), WaTech…