IT Security Engineer - Hybrid - Remote

What You'll Be Doing

Bring your passion for information technology and security engineering to a role where it truly makes an impact.

As the IT Security Engineer
, you will be responsible for designing, implementing and maintaining security controls and platforms that protect the organization’s information systems, networks and data. This role will work closely with IT and business teams to identify security risks, respond to incidents and ensure compliance with internal policies and regulatory requirements.

Candidates must have meticulous attention to detail, outstanding problem-solving skills, with the ability to work comfortably under pressure and be able to deliver on tight deadlines and in accordance with legal and regulatory requirements.

The ideal candidate will have extensive hands‑on experience in at least two of the following key areas:

Security Operations

• Design, implement, administer and maintain enterprise information security platforms and solutions
• Monitoring potential security incidents and events
• Vulnerability and threat assessment and remediation
• Threat intelligence operationalization
• Security platform assessment and selection
• Security awareness and training
• Security consulting for internal teams and departments regarding appropriate applications, configurations, policies, and controls

Incident Response

• Develop, document and test organizational incident response plans, disaster recovery plans and business continuity plans
• Manage complex security incidents, including coordination with internal and external resources
• Maintain defensible evidence

Governance, Risk and Compliance

• Manage and conduct internal and external audits and assessments
• Manage vendor and third‑party risk, including ongoing assessments and remediation plans
• Develop, implement and manage security and risk policies, procedures, standards and guidelines
• Design, implement and assess security controls to meet industry best practices and legal and regulatory requirements

Essential Functions:

• Perform security incident and threat management, including monitoring security events, identifying abnormal/malicious behavior, investigating, triaging and remediating security incidents
• Plan, coordinate, implement and support information security measures and platforms to protect data, software and hardware
• Perform information security risk assessments, including service specific risk assessments, networks and systems, data security, network infrastructure and reporting on security status and incidents
• Develop and maintain complete security documentation related to security design, implementation, processes and practices
• Provide consultation to business units and technology teams on security best practices and ongoing requirements

NOTE:
This position is subject to 24‑hour on‑call rotation requirements and must be able to be onsite within1 hour.

Wake County Information Technology is in the heart of Raleigh’s booming downtown, a part of the Research Triangle area. If you’re a tech‑guru, this is the place to be. Our team of smart, dedicated people is respected within our organization and recognized as leaders in the use of technology by the prestigious Center for Digital Government, regularly ranking in the top ten among counties with a population for 1 million or more.

Our team members are our most valued asset and treated as such with competitive salaries and top‑notch benefits. We believe a good work/life balance helps people make better decisions, be more creative and enjoy coming to work. If you thrive in a highly collaborative, fast‑paced, supportive environment, then you owe it to yourself to check us out.

• Bachelor’s degree in Computer Science, Information Systems, Computer Engineering or a related field.
• Three years of experience in security design and administration.
• Equivalent education and experience are accepted.

Please include ALL prior work experience on your application and resume.

• Active Certified Information Systems Security Professional (CISSP), Security+, or equivalent security certifications are preferred
• Experience…