Cybersecurity Engineer

Cybersecurity Engineer

FT / PT Status – Full-Time

Salary – $55.00 - $70.00 Hourly Wage

Remote Work / In-Office – In-Office / On-Site

Location – Capitol Hill, Salt Lake City, Utah 84114

Final date to receive applications – 6/17/2026 at 5:00pm

The Office of Legislative Services (LSO) is a non-partisan office that provides internal support to the entire legislative branch. LSO provides support in varying ways, such as human resources, finance, IT services, printing, and more! As an internal support office, we look for individuals who embody a customer service mindset and demonstrate our core values.
One of the best parts about working for the Legislative Services IT team is the reach your work will have within state government. We are looking for a seasoned cybersecurity professional with deep expertise across enterprise security, application development security, networks, cloud services, and end-user protection. In this role, you will help design, implement, and continuously improve security tools, processes, reporting, services, and policies relating to our network infrastructure, applications, endpoints, identity systems, and servers.

You will serve as a trusted technical advisor, owning and maintaining a multi-year cybersecurity architecture roadmap aligned with organizational priorities and help mature the organization’s overall security posture through sound engineering and secure architecture.
This is a full-time, nonpartisan position that requires flexibility to work extended hours between November and March in preparation for, and during, the annual general legislative session. During the session (January through March), employees are required to work on-site. Outside of the session, employees are primarily office-based, with the option to work remotely once a week. Employees must maintain a permanent residence in Utah.

The ideal candidate will bring strong analytical judgment, technical depth, and a comprehensive understanding of cybersecurity methodologies, engineering practices, risk-based decision-making, and long-term cybersecurity strategic planning and implementation expected of a seasoned security professional.
The Cybersecurity Engineer is expected to demonstrate meticulous attention to detail, outstanding problem-solving skills, sound technical leadership, and the ability to perform effectively under pressure and tight deadlines.
They will have extensive experience with incident response across detection, triage, containment, eradication, recovery, and post-incident remediation, as well as leading security initiatives that reduce organizational risk.
To ensure success, a Cybersecurity Engineer must be comfortable working across a wide range of technologies and collaborating effectively with internal teams, vendors, and external partners while mentoring others and driving continuous improvement.
The successful candidate will demonstrate advanced knowledge of technologies such as antimalware, SIEM, firewalls, VPN, data loss prevention, IDS/IPS, IAM, reverse proxy, WAF, application security, cloud security, endpoint protection, vulnerability management, and security automation. They will be able to translate technical findings into actionable recommendations for non-technical users, guide secure design decisions, and balance operational needs with strong security controls. A deep knowledge of the NIST Cybersecurity Framework and the ability to apply it in architecture, risk assessment, control selection, and program maturity efforts is strongly desired.

• Help lead the design and evolution of enterprise cybersecurity architecture that protects the organization’s data, systems, applications, and networks.
• Participate in the planning, implementation, management, monitoring, and continuous improvement of security measures that protect the organization’s data, systems, and networks.
• Review new and existing technologies, projects, and system changes to identify security risks and recommend practical, risk-based mitigations.
• Design and review secure architecture for internally developed applications, infrastructure, identity services, and cloud-based systems.
• M…