L&I IT Security Vulnerability Management - Journey

Our Mission

Keep Washington Safe and Working!

Customer Focus, One L&I, Respect, Diversity, Equity and Inclusion, Learning and Growth, Reliability

Join us as a Journey-Level IT Security Engineer and play a critical role in safeguarding the technology that powers our agency.

In this highly specialized position, you’ll lead the configuration, implementation, and optimization of advanced security solutions that protect our systems, networks, and data. Your expertise will directly support a robust IT security program focused on maintaining the confidentiality, integrity, and availability of mission‑critical resources.

You’ll be at the forefront of cybersecurity—proactively planning, analyzing, and enhancing security policies, tools, and procedures that empower staff and strengthen our defenses. This role goes beyond maintenance; you’ll continuously assess and monitor complex environments to uncover vulnerabilities and drive meaningful corrective action before risks become threats.

As a trusted Security Engineer, you’ll take ownership of identifying and prioritizing vulnerabilities across a diverse technology landscape, including on‑premise, hosted, and cloud‑based systems. Your work will be essential in mitigating risks that could otherwise lead to system breaches or data compromise.

You’ll also serve as a key advisor, partnering with IT leadership, technical teams, vendors, and contractors to provide expert guidance on security risks and solutions, ensuring that security is embedded into every layer of our operations.

If you’re passionate about cybersecurity, thrive in a dynamic environment, and want to make a tangible impact, this is your opportunity to step into a role where your skills truly matter.

• Vulnerability Management, including:
  • Configure the vulnerability assessment tools to match L&I standards and Center for Internet Security (CIS)
  • Create, implement, and follow procedures for vulnerability scanning
  • Perform on‑demand scans for newly implemented systems
  • Create Key Performance Indicator (KPI) reports and recommend enterprise mitigation strategies
  • Analyze vulnerabilities to determine impact to our environment, eliminate false positives, research and articulate business impact to the agency.
  • Develop vulnerability tests, risk analysis and security assessments
  • Prioritize vulnerabilities and risks
  • Identify trends and enterprise problem areas
  • Test new L&I systems and applications for vulnerabilities before they go live.
• Security Consulting, including:
  • Security consultant to L&I business areas and L&I IT staff and IT leadership
  • Translate technical security concepts for customers and audiences with differing levels of technical understanding.
• Security Monitoring/Response, including:
  • Analyze, research and assess agency risk using ITSS security defenses and services and determine appropriate response
  • Develop, design, and implement and provide requirements to Tier 1 and Tier 2 personnel
  • Coordinate threat containment and remediation activities with the system owner(s).
• Manage Security Awareness training program, including:
  • Phish Firewall - Act as the administrator
  • Analyze requests for new Access Control Lists
  • Propose Security Awareness training curriculum
  • Research and propose security training content
• Project Management & New Solution implementation, including:
  • Managing work breakdown structures and coordinating work efforts with other teams
  • Develop, design, and implement new processes and technology to keep the risks to our systems and vulnerabilities low

• Six years of IT experience with at least two years of IT Security experience
• A bachelor's degree in Information Technology, Information Assurance, Computer Science and two (2) years of IT experience with at least one (1) year of IT Security experience
• An associate's degree in Information Technology, Information Assurance, Computer Science and four (4) years of IT experience with at least one (1) year of IT Security experience
• For this role, IT Security Experience must include experience in two or more of the following security technologies:
  • Digital Forensics
  • User Management
  • General Cybersecurity
  • Network Security
  • Security Assessments
  • Deskt…