Summary StatementThe principal responsibility is to provide highly effective security engineering support for DTI's cloud environments, applications, and identity services. Services will be delivered efficiently, meet the needs of DTI and other state agencies, and comply with DTI policies and procedures. The position will work collaboratively with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls.
The Senior Security Engineer is expected to be highly technical with a strong background across cloud, application, and identity security, including but not limited to:
- Cloud security platforms, services, and configuration management.
- Cloud identity and access management, privileged access, and secrets management.
- IAM administration and support, including single sign-on (SSO), multifactor authentication (MFA), application integrations, access policies, and user lifecycle management.
- Application and application programming interface (API) security.
- Application security testing, secure code review, and vulnerability remediation.
- Secure architecture reviews and threat modeling.
- Security automation, infrastructure as code, and integration of security controls into development and deployment pipelines.
- Troubleshooting cloud, application, and identity security issues in collaboration with technical teams and vendors.
Preferred QualificationApplicants who do not possess the preferred qualification will still be eligible to compete for this position if job requirements are met.
- Possess a bachelor's degree in information technology, computer science, cybersecurity, or a related field.
- Possess a certification in cloud cybersecurity, application security, or identity and access management relevant to the assigned services.
- Possess experience integrating applications with Okta using SAML, OpenID Connect (OIDC), OAuth 2.0, or SCIM.
- Possess experience securing cloud-native applications, containers, serverless services, or software supply chains.
- Possess experience applying NIST security frameworks, CIS Benchmarks, or OWASP application security guidance.
Job RequirementsJob Requirements for Senior Security Engineer Please attach a resume with your online application or use the resume tab in DEL to provide a detailed description of how your education, training and/or experience meets each job requirement including employer, experience/responsibilities and dates (month/year} of employment/training.
- Possess a minimum of 5 years of hands-on experience in an enterprise IT environment, including cybersecurity, infrastructure engineering, or software development.
- Possess a minimum of 3 years of technical engineering experience in cloud security and/or application security, including hands-on experience in both areas.
- Possess experience implementing and supporting security controls in at least one major cloud platform, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud.
- Possess experience identifying, validating, and remediating application or API vulnerabilities through security testing, secure code review, or threat modeling.
- Possess experience implementing identity and access controls, secure configurations, and protections for sensitive data across cloud environments and applications.
- Possess experience using scripting, infrastructure as code, or development and deployment pipelines to automate security controls or security testing.
Additional Posting InformationThis position may be eligible for a hybrid schedule, with a minimum of two days per week in the office. More information will be shared at the time of interview.
Conditions of HireCriminal background check: A satisfactory fingerprint based criminal background check administered by the Delaware State Police is required as a Condition of Hire.
BenefitsDTI's Benefits to include: Group Health Plan, Dental Plan, Vision Plan, Prescription, Flexible Spending (Health and Dependent Care), Long & Short Term Disability Insurance, Group Universal Life Insurance, Accident & Critical Illness Insurance, Health Management Programs.
21 paid vacation days, 15 paid sick days, 13 paid holidays, Up to 12 weeks paid Parental Leave.
Tuition reimbursement up to $4,000 annually.
State funded learning opportunities, mentor programs and professional development opportunities.
Employee Assistance Program: Access to support services such as Professional Counseling Services, Legal Services, Financial Services.
Employer & Employee Funded Pension Plan as well as an Employee Funded Retirement Savings Plan available.
To learn more about the comprehensive benefit package please visit our website at https://dhr.delaware.gov/benefits/agencies/index.shtml.
Selection ProcessThe application and supplemental questionnaire are evaluated based upon a rating of your education, training and experience as they relate to the job requirements of the position. It is essential that you provide complete and accurate information on your application and the supplemental questionnaire to include dates of employment, job title and job duties. For education and training, list name of educational provider, training course titles and summary of course content. Narrative information supplied in response to the questions must be supported by the information supplied on the application including your employment, education and training history as it relates to the job requirements.
Once you have submitted your application on-line, all future correspondence related to your application will be sent via email. Please keep your contact information current. You may also view all correspondence sent to you by the State of Delaware in the "My Applications" tab at StateJobs.Delaware.gov.
Selection Plan Ongoing Application Review
