IT Security Specialist 1 (Cybersecurity Specialist)

Job Description

This Individual Position is Exempt from the Hiring Freeze. Qualified Applicants are Encouraged To Apply.

Welcome to the Department of Health!

We’d be delighted to have you join our team.

If you envision yourself in this role and are ready to start an exciting career with us, apply today!

This position is open to Alaskan Residents only.

Please check out the

residency definition

to determine if you qualify.

This position is currently located in Anchorage and Haines

.

The position may be filled statewide

, depending upon the location of the most qualified candidate.

What you will be doing:

In this role, you will support the department’s information security program by performing hands-on assessments of systems, networks, and applications to identify vulnerabilities and verify security control implementation. Additionally, they will facilitate secure code reviews, analyze security logs, coordinate penetration testing activities, and assist technical teams in applying remediation measures to strengthen system defenses.

Their work will ensure compliance with required security and privacy frameworks such as HIPAA, HITECH, APIPA, IRS Pub 1075, PCI-DSS, and CJIS while helping maintain the confidentiality, integrity, and availability of departmental data.

The position also supports continuous monitoring efforts, triages alerts, and supports incident investigations through evidence gathering and documentation.

Through these activities, the successful applicant will contribute to the department’s overall information assurance posture by applying established methods and tools to protect systems and ensure secure operations.

Our organization, mission, and culture:

The Department of Health’s core mission is to “Promote and protect the health and well-being of Alaskans.” As a member of the Department Security Office (DSO), your goal will be to work through the Department CISO to enable the Department to make informed decisions on the risks associated with the systems it employs. We strive to thoroughly assess each system that the Department engages, to ensure we can critically assess any associated risks and remediate those risks, where possible. To that same mission, we continually engage with peer agencies to monitor and remediate any security events or vulnerabilities that are identified, maintain currency in the security space, and protect the health and privacy data of the citizens of this great state.

The benefits of joining our team:

There is a worldwide shortage of cybersecurity professionals; our goal is to build a close-knit, collaborative environment where cyber professionals can learn and develop their skill sets in the above-mentioned areas, all while enjoying the security and peace of mind being a state employee affords. The team is constantly reviewing training mechanisms and coursework to ensure that each team member can build out their knowledge sets in all facets of information technology. The team is highly connected and strives to continually collaborate and train each other when a hole is identified. Lastly, as experienced and trained security professionals, DSO staff enjoy benefits like the option of telecommuting and flexible working hours.

The working environment you can expect:

The Anchorage DSO is centrally located in midtown Anchorage at the Frontier building. Local restaurants and even a movie theater are just around the corner. Midtown Anchorage offers plenty of amenities and is centrally located to afford an easy commute to all regions of the Anchorage Municipality and the Matanuska Valley. Juneau DSO is located in the Alaska Office Building in downtown Juneau. Close to restaurants and a quick jaunt to the waterfront. This position has been approved for 100% telework in other cities in Alaska, as long as you have the bandwidth connectivity to perform the duties.

Who we are looking for:

The ideal candidate will possess some or all of the following position-specific competencies in addition to the minimum qualifications listed below:

Integrity/Honesty

: Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Models high standards of ethics.

Reasoning

: Identifies rules, principles, or relationships that explain facts, data, or other information; analyzes information and makes correct inferences or draws accurate conclusions.

Technical Expertise

: Effectively applies technical knowledge to solve a range of problems; develops technical solutions to new or highly complex problems that cannot be solved using existing methods or approaches; is sought out as an expert to provide advice or solutions in the technical area.

Special Notice

:

Salary is dependent on the location.

If selected, the candidate must work from within Alaska. Telework is permitted.

Reliable internet connection required for Telework.

Minimum Qualifications

Competency-Based Minimum Qualifications Instructions

This job class uses competency-based minimum qualifications.

Please ensure your application

(through work history, volunteer experience (duties summary), training, education, licenses, certifications, etc.) supports how you have gained the knowledge, skills, abilities, and behaviors (competencies) and that you possess the minimum required competencies for the job class.

Competency Description

The competency description(s) listed below have been designed to promote a common understanding of the essential elements of the job class.  They highlight the more general and customary knowledge, skills, abilities (KSAs), tasks, and behaviors used to describe the competency.  They typically list expectations rather than specific tasks and are to be used only as parameters and guidelines.   A competency’s description is not intended to exclusively define every KSA, task, and behavior needed to successfully meet the competency, but rather to provide the manager/agency with a broad reference of options as to how an applicant can meet the job expectation.

Please ensure your application (through work history, training, education, licenses, certifications, etc.) supports/demonstrates that you possess the minimum required competencies for the job class.

Any combination of education and/or experience that provides the applicant with competencies in:

Computer Network Defense:

Knowledge of defensive measures to detect, respond, and protect information, information systems, and networks from threats.

Information Assurance:

Knowledge of methods and procedures to protect information systems and data by ensuring their availability, authentication, confidentiality, and integrity.

Information Systems/Network Security:

Knowledge of methods, tools, and procedures, including development of information security plans, to prevent information systems vulnerabilities, and provide or restore security of information systems and network services.

Systems Testing and Evaluation:

Knowledge of principles, methods, and tools for analyzing and developing systems testing and evaluation procedures and technical characteristics of IT systems, including identifying critical operational issues.

Web Technology:

Knowledge of the principles and methods of web technologies, tools, and delivery systems, including web security, privacy policy practices, and user interface issues.

Equivalent to those typically gained by:

Training in computer science, information systems, information assurance, cybersecurity, or a similar field and professional Information Technology experience.

Special Note:

Some positions may require the incumbent to have/obtain and maintain specific information security certifications such as Certified Information Systems Security Professional (CISSP) or Security+. These requirements will be specified in the recruitment bulletin and supporting position description.

“Competencies” means a combination of interrelated knowledge, skills, abilities, and behaviors that enable a person to act effectively in a job or situation.

“Typically gained by” means the pre