POSITION SUMMARY

Security Engineer will perform advanced, specialized work of a professional nature, utilizing skills that require technical expertise and an understanding of complex analytical procedures and security system processes while working with a significant amount of independent authority and judgment. Incumbents may lead a project team or provide expertise in information security systems, including definition of user requirements, feasibility studies, design, program specifications, testing, and implementation; and performs other related duties as assigned.

DUTIES AND RESPONSIBILITIES

1. Continually improve information security posture of Bernalillo County by staying abreast of the latest threats, trends, and technology solutions. Define, design, and drive the information security roadmap.
2. Assess the organization’s security requirements and set appropriate best practices and standards.
3. Engineer, implement and monitor security measures for the protection of computer systems, networks, and information. Develop Information Security Plans and Policies. Research and develop technology solutions for cyber security applications.
4. Design, maintain, and update the security measures required to safeguard systems, networks, and data for Bernalillo County.
5. Analyze network traffic and packet capture to understand data flows and identify abnormal network traffic. Take appropriate action to mitigate any security vulnerabilities created by abnormal network traffic and make configuration changes to security systems to prevent future problems.
6. Assess information system vulnerabilities by penetration testing and mitigate identified vulnerabilities or recommend technical solutions to mitigate security vulnerabilities.
7. Maintain strong knowledge of the newest active security threats and events and use that information to hunt down the newest cyber security threats within dynamically changing technical environment.
8. Mitigate security vulnerabilities by implementing applicable solutions and tools. Configure, maintain, and troubleshoot security infrastructure devices.
9. Monitor for security breaches. Investigate security breaches and security incidents. Ensure Management knows as much as possible, as quickly as possible about security breaches or incidents. Closely advise internal stakeholders regarding security breaches or incidents, inclusive of root cause analysis and remediation.
10. Leads the work of subordinate security staff within an assigned work unit; directs the work of peers and/or subordinate professional information technology staffed on assigned projects.
11. Prepares reports for Executive staff and internal County departments such as HR and Legal, prepares correspondence and other documents; participates on committees and task forces; attends meetings, conferences, and training sessions.
12. Required to be on 24/7 on-call duty which is on a rotation basis. 
13. Perform other job-related duties as required or assigned.

1. Bachelor’s Degree in Computer Science, Information Systems, or a closely related field and six (6) years’ experience as a security engineer; OR any related combination of education from an accredited college or university or related experience totaling ten (10) years’ experience as a Security Engineer.

SPECIAL REQUIREMENT 

1. Preferred Cisco Certification, CCNP Security Certification or Certified Information Systems Security Professional (CISSP)

ADDITIONAL REQUIREMENTS

1. Employee must successfully complete the post-offer employment medical examination and background investigation.
2. Employee must comply with the safety guidelines of the County.
3. Employee must complete required FEMA training(s) as assigned to position.
4. Employee must have a valid New Mexico driver’s license by employment date and maintain a valid NM driver’s license while in this position.