EngineerJobs.io
← Back to all jobs
Department of Taxation

Information Systems Security Engineer

Department of Taxation
Richmond, VA $95k - $120k/yr Full time Posted 12d ago
Application Security Cloud Platforms Information Security Information Technology (IT) InfoSec Security Operations Security Standards Security Testing
Apply Now

Job Description

The Virginia Department of Taxation is seeking an Information Systems Security Engineer to strengthen application security across the Software Development Life Cycle.

Responsibilities

  • Support protection of confidentiality, integrity, and availability for Virginia Tax IT resources
  • Lead security practices throughout the Software Development Life Cycle to improve application security outcomes
  • Act as a key coordination point between application and engineering teams and the broader joint security operations teams
  • Proactively document, identify, assess, and help mitigate vulnerabilities before exploitation
  • Review system architectures with a focus on building and maintaining strong security controls
  • Develop and maintain system security plans
  • Guide teams on secure development practices
  • Ensure adherence to security policies and standards
  • Enable application teams to design, deliver, and operate secure applications and environments
  • Combine hands-on technical security expertise with the ability to influence engineering practices and promote a security-first culture

Requirements

  • Experience providing information security guidance and training
  • Knowledge and experience with application development and security architecture
  • Knowledge of secure coding standards and guidelines and ability to identify security flaws in source code
  • Knowledge of vulnerability remediation and patch management for applications
  • Experience with SAST, DAST, and IAST security testing tools, including examples: Accunetix, Veracode, Jenkins, Splunk, Rapid7, Tenable
  • Knowledge and experience with Web Application Firewalls (WAFs) and AWS Security Groups implementation strategies
  • Security information and event management (SIEM) system experience, including Splunk, Azure Sentinel, or IBM QRadar
  • Knowledge and experience with AWS services, including: Security Hub, GuardDuty, Security Groups, Inspector, Config, CloudWatch, S3 Buckets, IAM, CloudTrail, EC2, CodePiplines, KMS, Secrets Manager
  • Knowledge and understanding of security regulations and standards, including: NIST 800-53, IRS Pub 1075, PCI-DSS, OWASP Top10, MITRE ATT&CK, CIS Benchmarks, NIST Cybersecurity Framework
  • Comprehensive knowledge of a System Security Plan (SSP), including experience creating and maintaining an SSP

Technologies

  • Accunetix
  • Veracode
  • Jenkins
  • Splunk
  • Rapid7
  • Tenable
  • Web Application Firewalls (WAFs)
  • AWS Security Groups
  • SIEM
  • Azure Sentinel
  • IBM QRadar
  • Security Hub
  • GuardDuty
  • Inspector
  • Config
  • CloudWatch
  • S3 Buckets
  • IAM
  • CloudTrail
  • EC2 (Elastic Compute Cloud)
  • CodePiplines
  • KMS
  • Secrets Manager
  • NIST 800-53
  • IRS Pub 1075
  • PCI-DSS
  • OWASP Top10
  • MITRE ATT&CK
  • CIS Benchmarks
  • NIST Cybersecurity Framework

Location and Schedule

  • Richmond, VA (hybrid)
  • Main Street Centre location in Richmond, Virginia
  • Hybrid schedule: 3 days in the office (Tuesday, Wednesday, Thursday) and 2 days teleworking (Monday and Friday)
  • Must reside within 50 miles of the Richmond office to be eligible

Compensation

  • USD 95,000 - 120,000 per year

Benefits

  • Job stability and quality of life: flexible schedule options and up to two days of telework per week
  • 12 paid state holidays in addition to vacation, sick, volunteer, and personal leave
  • Comprehensive and affordable health benefits
  • Potential eligibility for Public Service Loan Forgiveness
  • Participation in the Virginia Retirement System, VA 457 Deferred Comp, and more

Additional Considerations

  • CompTIA Security+
  • Certified Cloud Security Professional (CCSP)
  • ISC2 CC (Certified in Cybersecurity)
  • AWS Certified Security
  • AWS Solutions Architect (Associate/Professional)
  • AWS Security Specialty

Special Instructions

  • Confirmation of receipt is provided when application and/or résumé is submitted successfully; check status under Your Application
  • All Virginia Tax employees must be current with filing tax returns in compliance with established laws, rules, and regulations
  • Selected candidates must consent to and successfully pass a background investigation including fingerprint-based criminal history, tax compliance, and DMV driving record checks (if applicable)
  • Selected candidates require a valid Driver’s License
  • Selected candidate is prohibited from performing tax or accounting services for compensation during or outside business hours

Contact

Similar Jobs