IT Security Engineer

Salary: $110,489.60 - $134,076.80 Annually
Location : Des Moines, IA
Job Type: Regular Full-Time
Job Number: 4195-09-2026
Department: Information Technology
Opening Date: 09/25/2026
Closing Date: 10/9/2026 4:00 PM Central
FLSA: Exempt
Bargaining Unit: MEA
Occupational Group: Civil Service
Location of Vacancy: Information Technology Department
Recruitment: Entrance
Selection Method: An education and experience review will be completed on all qualified applicants. Applicants deemed most qualified based on qualifications may be scheduled for an oral examination.

General Statement of Duties

The IT Security Engineer is responsible for monitoring, assessing and remediation of the City's external and internal cybersecurity risk. The Security Engineer will utilize and maintain existing City security platforms and recommend new security platforms to mitigate threats. This position will serve as a subject matter expert to consult with other IT and City departments on Cybersecurity practices to minimize risk.

Works closely with the other Information Technology team members, internal and external customers, and vendor partners in order to perform cybersecurity threat monitoring, prevention, detection and response. Meets the evolving needs of the City Information Security Program including completing security projects and upgrades, responding to security events, maintaining established security protocols and platforms, diagnosing technical issues, providing technical solutions to City departments and critical facilities, and contributing to development of policy and training.

Acceptable Experience and Training

• Graduation from an accredited four year college or university with a degree in or major course work in Computer Science, Information Systems, Cybersecurity or related field; and
• Four years of applied experience managing enterprise security systems and performing security analysis;

OR

• Associates degree in Computer Science, Information Technology, Cybersecurity or related field; and
• Six years of applied experience managing enterprise security systems and performing security analysis;

OR

• Technical certifications such as SSCP, CCSP, CISSP, or SANS; and
• Eight years of applied experience managing enterprise security systems and performing security analysis.

College transcripts and/or technical certifications, if applicable, need to be submitted to the City of Des Moines Human Resources Department by the application deadline to receive credit. Please attach to your online application or submit separately by email to humanresources@dmgov.org, by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309by the application deadline
Required Special Qualifications

• Candidates for positions in this class must pass a post-employment offer background check, physical examination, and drug screen.
• Possession of a valid Iowa driver's license or evidence of equivalent mobility.

Applicants who possess an out-of-state driver's license must submit a certified driving record to the City of Des Moines Human Resources Department by the application deadline. Please attach to your online application or submit separately by email to humanresources@dmgov.org, by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309by the application deadline
Examples of Essential Work (Illustrative Only)

• Designs, plans, engineers, implements, configures, troubleshoots, monitors, tests, maintains, secures, manages and documents security platforms, systems, networks, and associated hardware and software related to information security.
• Monitors, assesses and responds to vulnerabilities, alerts and/or security incidents as needed to maintain 24/7 City operations. Stays apprised of and communicates emerging threats.
• Functions as a subject matter expert and escalation point, providing technical leadership for any security incidents, issues or requests from the IT support and administration teams.
• Conducts after-action reviews, researches, and provides insight and recommendations to assess, improve, and deploy security technology solutions, processes and procedures.
• Identifies potential system or network weaknesses through existing security platforms and security best practices.Creates and documents security engineering and mitigation processes, standards and assessments.
• Plans, coordinates and tests changes, upgrades, and new services, ensuring systems will operate correctly and securely in current and future environments and provide for business continuity and redundancy.
• Assists with selection and evaluation of security vendors and contracts, and monitors vendor performance.
• Helps create change requests, statements of work, project plans and/or budgets for security upgrades.
• Helps set, implement, and deliver City cybersecurity training program priorities and project plans.
• Advises on information security policy and programming. Completes thorough reviews and implements modifications required by the City Information Security Program in order to support security governance, regulation, and compliance by City departments and partners.
• Works outside regular business hours when needed for maintenance, project performance, and incidents.
• Performs other related duties as assigned.

01

Do you have college education in Computer Science, Information Systems, Cybersecurity, or related field? If Yes, submittal of college transcripts is required by application deadline to receive credit. Transcripts may be attached to my online application or submitted separately to the City of Des Moines Human Resources Department by email to humanresources@dmgov.org, by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309 by the application deadline date. FAILURE TO SUBMIT ALL REQUIRED DOCUMENTATION MAY RESULT IN APPLICATION DISQUALIFICATION.

• I earned a college degree. My college transcripts are attached to my application.
• I earned a college degree. I understand that college transcripts are required by the application deadline to receive credit and I have requested my transcripts. I further understand that it is my responsibility to make sure the transcripts are received by the application deadline.
• I completed some college coursework but did not earn a degree.
• I have not completed any college course work.

02

Do you currently hold any technical certifications such as SSCP, CCSP, CISSP, or SANS? If yes, a copy of your certification(s) is required by the application deadline to receive credit. Certification(s) may be attached to the online application or submitted separately to the City of Des Moines Human Resources Department by email to humanresources@dmgov.org, by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309 by the application deadline date. FAILURE TO SUBMIT ALL REQUIRED DOCUMENTATION MAY RESULT IN APPLICATION DISQUALIFICATION.

• Yes
• No

03

I have read and understand that if I possess a non-Iowa driver's license, submittal of my certified driving record is required by the application deadline. Certified driving record may be attached to the online application or submitted separately to the City of Des Moines Human Resources Department by email to humanresources@dmgov.org, by fax to 515-237-1680, or by mail or hand delivery to 1200 Locust Street, Des Moines, IA 50309 by the application deadline date. FAILURE TO SUBMIT ALL REQUIRED DOCUMENTATION MAY RESULT IN APPLICATION DISQUALIFICATION.

• I do not possess a non-Iowa driver's license.
• I possess a non-Iowa driver's license and have attached my certified driving record to my application.
• I possess a non-Iowa driver's license, am requesting a copy of my certified driving record and will submit it to the City of Des Moines Human Resources Department by the application deadline.

04

I understand that such responses as "see resume", "see application", etc. to the following supplemental questions are not acceptable. Responses must be thorough, clear, and concise to receive credit.

• I understand responses must be thorough, clear, and concise to receive credit.

05

Describe your experience managing enterprise security systems, platforms, and solutions, including where this experience was obtained and duration of experience. If no experience, indicate "none".
06

Describe an IAM environment you currently support or have most recently supported, including approximate user population, applications, directories, identity providers, and privileged systems. If no experience, indicate "none".
07

Describe your experience working with HR, service desk, application owners, infrastructure, cloud, security operations, audit, and compliance teams to implement and establish IAM controls, JML processes, policies, standards, procedures, design patterns, workflows, or governance. If no experience, indicate "none".
08

Describe your experience with service accounts, managed service accounts, service principals, managed identities, API keys, certificates, or application secrets. If no experience, indicate "none".
09

Describe your experience integrating IAM logs with an SIEM or security-monitoring platform. If no experience, indicate "none".
10

Describe any access-control frameworks you have experience with. Some examples include: NIST, ISO 27001, SOC 2, SOX, HIPAA, PCI DSS, CJIS, or CIS Controls. If no experience, indicate "none".
Required Question