Apply on Employer Site

State of Nebraska · 2 days ago

IT Security Engineer I

Lincoln, NE

Full-time

Onsite

Entry Level

$32.50/hr - $32.50/hr

3+ years exp

The State of Nebraska is seeking an IT Security Engineer I to join their Office of the Chief Information Officer. This entry-level cybersecurity role focuses on foundational cybersecurity tasks and involves monitoring security alerts, performing security assessments, and maintaining compliance documentation.

Government Administration

No H1B

Responsibilities

Monitor real-time security alerts, logs, and events using organizationally established tools such as a Security Information and Event Management (SIEM)

Perform initial triage and information gathering of security alerts, escalating complex issues to senior staff as needed

Perform fundamental security and vulnerability scans and assessments and meticulously document the findings

Aid in maintaining and updating cybersecurity and compliance documentation

Document security incidents and assist with incident reports

Participate in the management of the Agency Security Program by identifying and tracking security gaps and Plan of Action and Milestones (POAM) associated with the security program

This involves properly assigning and resolving security gaps including risk acceptance, remediation and compensating controls

Other duties as assigned and within the scope of the classification

Qualification

IT Security principlesSecurity tools experienceAnalytical skillsNIST frameworkPythonCommunication skillsProblem-solving skillsTeamworkAttention to detail

Required

Associate's degree in computer science or a related field in information technology is required, or alternatively, three years of relevant work experience in an IT function related to the position

This experience must include information security or a related IT field, such as IT support or system administration

Any equivalent combination of education and experience will be considered

Regular and reliable attendance required

Knowledge of: Fundamental IT Security principles and frameworks such as NIST, CIS, or ISO

Have basic knowledge of common attack vectors, threats, and vulnerabilities

Have a rudimentary understanding of network, systems, or application security

Be able to understand regulatory compliance and cyber risk management

Skills in: Analytical and Problem-Solving under direction as it relates to security risks, identifying potential threats, triaging alerts, and recommending mitigations

A person must have basic technology skills and proficiencies (e.g., Windows, Linux, PowerShell, Python) or other applications and technologies

A person in this role must be able to effectively write and verbally communicate with supervisors and other team members as part of being an effective team member

Ability to: Must be able to communicate information/ideas to others, recognize a problem, and apply general rules to specific problems to come up with logical answers

A person in this role must have the ability to follow multiple step instructions; combine separate pieces of information, or specific answers to problems, to form general rules or conclusions; concentrate and not be distracted while performing a task over a period of time; efficiently shift back and forth between two or more activities or sources of information

The person for this role must be of high integrity as they could potentially have access to confidential and sensitive information