Port Of Seattle
Manages Seattle's airport, seaport, and real estate, driving regional economic growth.
Information Security Engineer/Analyst III
Identify, mitigate, and manage security threats across network, systems, and data.
Job Highlights
About the Role
As the Information Security Engineer/Analyst III, you will identify, analyze, and mitigate security threats to the Port’s networks, systems, and data. You will develop and deliver end‑user training content, lead the assessment and integration of medium to large or complex cybersecurity solutions, and partner with Legal to support record retention and e‑discovery needs. Additionally, you will provide cybersecurity deliverables for major project implementations and engage in incident response to protect the Port’s infrastructure. You will create and maintain information security policies, procedures, guidelines, and standards, including access control policies and incident response plans. You will also mentor and train junior Information Security Engineers/Analysts, fostering their professional growth and ensuring a knowledgeable security team. • Detect and respond to advanced threats, threat‑actor techniques, and suspicious activity. • Deliver cybersecurity components of large projects such as threat models, risk assessments, vulnerability scans, and third‑party testing reports. • Assess, recommend, deploy, and integrate complex cybersecurity solutions. • Create and facilitate end‑user security training for diverse audiences. • Collaborate with Legal to support record retention and e‑discovery requirements. • Develop and maintain security policies, procedures, guidelines, and standards. • Provide mentorship and professional development for Information Security Engineer/Analyst Levels I and II. • Apply equity principles and embody shared values in all work.
Key Responsibilities
- ▸threat detection
- ▸risk assessment
- ▸vulnerability scans
- ▸security integration
- ▸security training
- ▸security policies
What You Bring
• Minimum three years of experience in Information Technology and/or security. • Desired certifications: CISSP, GIAC, CASP+, CISM. • Strong analytical, planning, and problem‑solving skills. • Experience with security technologies and compliance frameworks (CJIS, HIPAA, PCI‑DSS, FISMA, GDPR). • Effective oral and written communication of complex technical concepts to both technical and non‑technical stakeholders.
Requirements
- ▸it experience
- ▸cissp
- ▸cism
- ▸problem solving
- ▸compliance
- ▸communication
Work Environment
Office Full-Time