Cyber Security Engineer

Job Title:

Cyber Security Engineer

Job Category:

☐Management

☐Engineering

☒Specialist

☐Systems and Data Management

Minimum Years of Experience/Position Level:

5-10 Years/Mid-Level

Applicable to:

☒DOT

☒County

☒City

☐MPO

☒Private

☒Toll Agency

General Summary of Position / Purpose of Position

The Cyber Security Engineer will assist in building cyber security into crucial operations systems to ensure safe TSMO activities.  Candidate should be knowledgeable in both commercial and open source information security technology.  The ideal candidate will be responsible for the design, development, implementation, and integration of architectures, systems, or system components.  This position will ensure that the architecture and design of development and operational systems are functional, secure, and will assist in the development of innovative approaches to drive change in cyber security risk management across the DOT to prevent or minimize disruptions to critical information infrastructure.  This position contributes to the assessment of current cyber security systems, policies, and processes to enforce standards and identify vulnerabilities and capability gaps, and to synthesize this data to reduce cyber security risk.  Special attention is given to intrusion detection, finding and fixing unprotected vulnerabilities, traceability, compartmentalization, and ensuring that remote access points are well secured. 

Roles and Responsibilities

1.0 Technical

% of Time

  1. Lead and execute advanced cyber security risk analysis and examine results of vulnerability analysis and cyber security control compliance in order to perform a detailed risk assessment.
  2. Interpret information technology (IT) policies, standards, and guidelines.
  3. Develop cyber security protocols and monitoring systems, managing all aspects of network, operating systems, and systems security.
  4. Manage the installation and integration of systems fixes, updates, and enhancements.
  5. Testing and optimizing the functionality of systems, networks, and data.
  6. Assist with documentation and building cyber into modernization programs.
  7. Participate on committees, task teams and in other groups as needed.
  8. Oversee and lead team / group activity, documenting results and related presentations as necessary.
  9. Act as a technical advisor providing advice and guidance on a wide range and variety of complex IT and cyber security issues.

60%

2.0 Strategic Planning

% of Time

  1. Develop cyber security related plans to guide resource allocation and achieve unit performance targets.
  2. Collaborate with others in plan development, reporting plan results, linking performance targets to specific, measurable, achievable, relevant, time-bound, (SMART) objectives in staff expectations, identifying and making resource recommendations.
  3. Develop data-driven support to ensure funding and resources are utilized in the most cost effective and beneficial manner.
  4. Define and drive a technical and strategic vision for ensuring data and system integrity, minimal risk, and state of the art cyber security protocols for all aspects of TSMO practice.

20%

3.0 Project Management

% of Time

  1. Develop and manage cyber security related portions of consultant contracts and other types of agreements that support TSMO functions and/or relate to performance targets.
  2. Develop documentation for cyber security functions in contract funding, request for proposal (RFP) and related documents, and participate on technical review committees (TRC).
  3. Participate in system acceptance testing as needed.

10%

4.0 Customer Service

% of Time

  1. Participate in meetings, on committees, task teams and other groups with internal and external customers to support TSMO interests and provide technical guidance.
  2. Provide accurate and timely responses to the public, contractors, and other department personnel.
  3. Promote good public relations with internal and external stakeholders while adhering to internal policies.
  4. Communicate effectively (strong written and verbal communication skills) and work well with team members from diverse technical backgrounds.
  5. Coordinate with agency security officer or state security agency.

5%

5.0 Other

% of Time

  1. Perform other duties as required.

5%

Education

☐High School Degree

☐Technical Degree/Associate Degree

☒Bachelor’s Degree in Related Field; or

☒Bachelor’s Degree in Engineering; or

☒Bachelor’s Degree in Computer Science

☐Bachelor’s Degree in Business

☐Bachelor’s Degree in Environmental Science

☐Bachelor’s Degree in Science, Economics, Statistics, or another Quantitative Field

☐Master’s Degree in Engineering

☐Master’s Degree in Engineering (preferred but not required)

☐Master’s Degree in Quantitative Field (preferred but not required)

☐PhD in Civil Engineering, Transportation Engineering, Electrical or Computer Engineering, Computer Science, or related field (preferred but not required)

Certificates, Licenses, Registrations

☐Registered Engineer in Training

☐Registered Professional Engineer

☐Professional Engineer Traffic Operations Engineer

☒Certified Information Systems Security Professional