IT Security Engineer - Hybrid - Remote

What You'll Be Doing

Bring your passion for information technology and security engineering to a role where it truly makes an impact.

As the IT Security Engineer, you will be responsible for designing, implementing and maintaining security controls and platforms that protect the organization’s information systems, networks and data. This role will work closely with IT and business teams to identify security risks, respond to incidents and ensure compliance with internal policies and regulatory requirements.

Candidates must have meticulous attention to detail, outstanding problem solving skills, with the ability to work comfortably under pressure and be able to deliver on tight deadlines and in accordance with legal and regulatory requirements.

• Design, implement, administer and maintain enterprise information security platforms and solutions.
• Monitoring potential security incidents and events.
• Vulnerability and threat assessment and remediation.
• Threat intelligence operationalization.
• Security platform assessment and selection.
• Security awareness and training.
• Security consulting for internal teams and departments regarding appropriate applications, configurations, policies, and controls.

• Develop, document and test organizational incident response plans, disaster recovery plans and business continuity plans.
• Manage complex security incidents, including coordination with internal and external resources.
• Maintain defensible evidence.

• Manage and conduct internal and external audits and assessments.
• Manage vendor and third-party risk, including ongoing assessments and remediation plans.
• Develop, implement and manage security and risk policies, procedures, standards and guidelines.
• Design, implement and assess security controls to meet industry best practices and legal and regulatory requirements.

• Perform security incident and threat management, including monitoring security events, identifying abnormal/malicious behavior, investigating, triaging and remediating security incidents.
• Plan, coordinate, implement and support information security measures and platforms to protect data, software and hardware.
• Perform information security risk assessments, including service specific risk assessments, networks and systems, data security, network infrastructure and reporting on security status and incidents.
• Develop and maintain complete security documentation related to security design, implementation, processes and practices.
• Provide consultation to business units and technology teams on security best practices and ongoing requirements.

WCOB Raleigh, NC 27602
• Regular
• Monday to Friday 8:30 am – 5:15 pm with on‑call rotation. Hiring range: $89,331 – $125,063, commensurate with experience. Market range: $89,331 – $160,793. Please include all prior work experience on your application and resume. Posting closing date: 7:00 pm on 1/20/2026.

Wake County Information Technology is in the heart of Raleigh’s booming downtown, a part of the Research Triangle area. If you’re a tech‑guru, this is the place to be. Our team members are our most valued asset and treated as such with competitive salaries and top‑notch benefits. We believe a good work/life balance helps people make better decisions, be more creative and enjoy coming to work.

If you thrive in a highly collaborative, fast‑paced, supportive environment, then you owe it to yourself to check us out.

• Bachelors degree in Computer Science, Information Systems, Computer Engineering or a related field.
• Three years of experience in security design and administration.
• Equivalent education and experience are accepted.

• Active Certified Information Systems Security Professional (CISSP), Security+, or equivalent security certifications are preferred.
• Experience implementing security controls governed by legal and regulatory requirements such as HIPAA and PCI.
• Experience administering, maintaining and troubleshooting enterprise security platforms, including but not limited to firewalls, intrusion detection/prevention, web filtering, vulnerability management, endpoint…