Information Security Engineer/Analyst I

The Port of Seattle is a public organization focused on advancing trade, travel, commerce, and regional quality of life. The Information Security Engineer/Analyst I will identify, analyze, and mitigate cybersecurity threats to networks, systems, and data while supporting compliance, security solution integration, vulnerability assessments, incident response, and security policy development.

What you'll do:

• You will create and facilitate end user training content related to information security and cybersecurity to diverse audiences
• You will use security tools to support programs’ core functions and key responsibilities
• You will contribute to efforts to assess, influence, recommend, deploy, and integrate cybersecurity solutions
• You will contribute to the cybersecurity portions of project implementations including vulnerability scanning and third-party security testing reports
• You will assist the Internal Audit team members with keeping up to date on the latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices
• You will assist in the detection and incident response of cybersecurity events and identify potential and active risks to systems and data
• You will assist in the development and maintenance of Information Security policies, procedures, guidelines, and standards, including developing access control policies, incident response plans, and other security-related documentation

What they're looking for:

• You have one (1) year of experience in Information Technology and/or Security
• You have strong analytical skills and can use critical thinking, logic, and reasoning to evaluate strengths and weaknesses to identify the most appropriate solution
• You can monitor security controls and policies that are aligned with compliance and regulatory framework requirements such as Criminal Justice Information Services (CJIS), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI-DSS), Federal Information Security Modernization Act (FISMA), and General Data Protection Regulation (GDPR), as well as the requirements for securing sensitive data
• You can communicate, both orally and in writing, technical concepts effectively with technical and non-technical stakeholders
• You can monitor the effectiveness of risk management principles, including identifying, assessing, and prioritizing risks, developing and implementing risk mitigation strategies, and monitoring and evaluating risk over time at an individual risk level
• CompTIA Security+, (ISC)² Certified in Cybersecurity (CC), and/or SANS GIAC Security Essentials Certification (GSEC)

Benefits:

• Medical, Dental, and Vision Care with options that work for you and your family.
• Just about four weeks of paid vacation per year that increases with tenure.
• At least one hour of paid sick leave for every 40 hours worked.
• More than ten paid holidays per year.
• A pension and additional savings plans.
• Subsidized parking and a low-cost public transit card.
• Alternative work arrangements giving you an opportunity to work hybrid.
• Six weeks of paid parental leave to spend with new additions to your immediate family.
• Tuition reimbursement, training, stretch assignments and internal internships.
• Resources to help you create habits to be healthy and balanced.