Information Security Engineer​/Analyst

Port of Seattle is building a more secure, more resilient digital environment for the systems that support the region's trade, travel, and commerce. In this hybrid role, you'll help protect Port networks, systems, and data while supporting compliance with relevant regulations and industry standards. You'll also work within a culture that emphasizes diversity, equity, accountability, and opportunities for professional growth through training, stretch assignments, and internal internships.

• Identify, analyze, and mitigate security threats impacting Port networks, systems, and data.
• Help minimize the risk of cyber attacks while supporting compliance with applicable regulations and industry standards.
• Create and facilitate end-user training content related to information security and cybersecurity for diverse audiences.
• Use security tools to support programs' core functions and key responsibilities.
• Contribute to assessing, influencing, recommending, deploying, and integrating cybersecurity solutions.
• Support cybersecurity tasks within project implementations, including vulnerability scanning and contributions to third-party security testing reports.
• Assist Internal Audit efforts by staying current on security techniques, technologies, and best practices for combating unauthorized access.
• Assist with detection and incident response for cybersecurity events, including identifying potential and active risks to systems and data.
• Develop and maintain information security policies, procedures, guidelines, and standards, including access control policies and incident response plans, plus related documentation.

• At least one (1) year of experience in Information Technology and/or Security.
• Preferred certifications include CompTIA Security+, (ISC)² Certified in Cybersecurity (CC), and/or SANS GIAC Security Essentials (GSEC).
• Strong analytical skills with the ability to apply critical thinking, logic, and reasoning to evaluate strengths and weaknesses and select appropriate solutions.
• Ability to monitor security controls and policies aligned with compliance and regulatory frameworks such as CJIS
  , HIPAA
  , PCI-DSS
  , FISMA
  , and GDPR
  , including requirements for securing sensitive data.
• Ability to communicate technical concepts effectively in writing and verbally with both technical and non-technical stakeholders.
• Ability to monitor risk management effectiveness, including identifying, assessing, prioritizing risks, implementing mitigation strategies, and evaluating risk over time.
• Establish and maintain residence in Washington state within 30 days of the first day of employment and throughout employment.
• Pass a Transportation Security Administration (TSA) background check and a criminal history background check with the Federal Bureau of Investigation (FBI).
• Employment is contingent upon obtaining a Port of Seattle upon clearance.
• In this role, you will be required to access Port of Seattle Police Department equipment, office locations, systems, and/or vehicles.
• Pass a CJIS criminal history background check in accordance with federal and state laws.
• Port of Seattle is unable to sponsor employment visas at this time.
• Salary offers will be made within the posted range, based on similar work experience where scope and level of responsibility match the position.

Salary range: USD 107,693 to 145,702 per year. Full-time regular position.

• Normal schedule:
  Monday-Friday, 8:00 a.m. to 5:00 p.m. (40 hours per week), with slightly flexible start and end times.
• May require on-call coverage during off-shift hours to respond to issues impacting Port operations.
• Work will occur in a hybrid/in-office setting at Management's discretion. If telework is eligible, work performed must be in Wash…