Salary : $85,800.00 - $115,416.00 Annually
Location : Thurston County - Lacey, WA
Job Type: Full Time - Permanent
Remote Employment: Flexible/Hybrid
Job Number: 2026-08620
Department: Parks and Recreation Commission
Opening Date: 10/13/2026
Closing Date: 10/26/2026 11:55 PM Pacific
DescriptionWashington State Parks and Recreation Commission Job Title: IT Security Analyst - Journey
Location: Lacey, WA
Closes: October 26th, 2026, at 11:55pm PDT
Position: after onboarding and training this positionis available for remote/partial telework/flexible schedule, some travel may occasionally be required. The default assigned work location of all Parks positions - both on-site and telework eligible positions - is within the State of Washington. Frequency of onsite work will vary based on business and operational needs
Washington State Parks is looking for a full time
IT Security Analyst- Journey (ISA) to join our team and play a critical role to help protect the systems, data, and technology services that support WA Parks mission, staff, and residents across the State.
This position is part of PARKS Information Security Office (ISO) within IT Services Department and reports to the Chief Information Security Officer (CISO). The role supports enterprise cybersecurity operations with a focus on vulnerability management, disaster recovery, secure system configuration, incident response support, and security-driven technical administration. This is a hands-on technical security position.
The position acts as the point of contact for both technical and process related security design, implementation, configuration, and support to other IT professionals and engineers in relation to systems and network defense. The ISA works closely with the Senior Specialist to implement, design, and maintain solutions and systems that meet the needs and requirements of the Parks overall IT Security Posture. Leveraging guidance from the Senior Analyst and IT Architect this position will ensure policy and procedural compliance with both State level and Parks organizational IT security policy.
The successful candidate will work closely with IT operations, network infrastructure, compliance, and agency staff to identify risks, improve security posture, and support reliable technology services across Parks Enterprise. Join us and be part of an exciting, fast-paced team dedicated to protecting vital systems that make a difference in Washington!
DutiesDuties include but are not limited to:
- Monitors, maintains, and configures systems related to risk, threat, and vulnerability management.
- Uses threat & vulnerability management tools to identify and remediate vulnerability from Parks infrastructure, often working with other teams and technical staff to develop plans of action to remediate the concerns in a timely fashion.
- Monitors Security Information and Event Management (SIEM) solutions, creating custom queries and alerts.
- Conducts assessments on agency systems ensuring compliance with overall IT security policy and identifies configuration changes that will improve security posture. Providing recommendations for remediation of findings.
- Provides technical resources and knowledge to internal and external Security Design Review (SDR) processes for systems, applications, IOT devices, and IT business solutions. Working under the guidance of the Senior Analyst to complete the required documentation and approval gates by using established SDR processes and tools established by OCS and Parks IT security Policy.
- Maintains ongoing and updated knowledge of current and emerging IT & Cyber Security policy and standards that have or will have a potential to impact Parks systems and business practices.
- Acts a subject matter expert and key resource for efforts to create baseline security standards and baselines for IT hardware & software, IOT devices, network & mobile devices, and cloud-based solutions.
- Attends and actively participate in WaTech Security Operations Center (SOC), Office of Cyber Security (OCS), WaTech Risk and Policy Office team meetings, representing Parks interests.
- Provides technical review during intake, assessment and review of mobile applications for security concerns and viability of use in compliance with current policies and standards.
- Regularly participates in security exercises that evaluate the effectiveness of the Agency's Disaster Recover Plan (DR), Business Continuity Plan(BCP), Continuity of Operations Plan (COOP), and Incident Response plan (IR).
Qualifications REQUIRED QUALIFICATIONS:Option #1Six (6) years of consultative, administrative, or supervisory experience in information technology security analysis, information security system implementations, and security application configuration and maintenance.
OR Option #2Bachelor's degree in computer science, management information systems, or closely related field
AND (2) two years of experience in consultative, administrative, or supervisory experience in information technology security.
DESIRED QUALIFICATIONS:- At least one of the following professional certifications: CISSP, CCSP, CRISC, GSEC, CEH, or Security+.
- At least (3) three years' experience developing, implementing, and enforcing agency information systems security policy, operating procedures, and technical standards.
- (3) three years' experience in designing and applying security controls and processes for securing the organization/agency.
- At least (2) two years' experience in identifying and resolving information security risks and incidents that may adversely impact agency operations or projects.
- At least (2) two years' project management experience with an emphasis in information technology or IT security.
- Additionally, the candidate will be measured against the following experience and ability (experience in at least half):.
- Systems / Network security.
- Web Application & development security.
- Risk Management
- Network discovery and vulnerability assessments.
- Malware analysis.
- Compliance audits.
- Log management.
- Ability to identify and document security vulnerabilities and their potential business impact.
- Implementing and monitoring security controls
- Ability to identify and document security vulnerabilities and their potential business impact.
- Implementing and monitoring security controls.
- Experience managing IT security in 3rd party cloud environments.
- Experience with Compliance management, specifically NIST, CJIS, PCI, and OCIO 141.10.
- Experience managing and maintaining security controls in Azure.
Core Competencies:Communication Skills: Clearly and effectively conveys and/or presents information verbally; summarizes what was heard to mitigate miscommunication; Shares ideas and perspectives, and encourages others to do the same; Informs others involved in a project of new developments; Disseminates information to other employees, as appropriate; Effectively uses multiple channels to communicate important messages; Keeps supervisor well informed about progress and/or problems in a timely manner; Writes in a clear, concise, organized, and convincing way for a variety of target audiences.
Customer Focus: Prioritizes customers (internal and external) and their needs as primary, and is dedicated to meeting their expectations; Develops and maintains customer relationships; builds credibility and trust; Quickly and effectively solves customer problems; Provides prompt, attentive service in a cheerful manner; adapts to changing information, conditions, or challenges with a positive attitude; Incorporates customer feedback into delivery of service to provide the best experience possible for the customer.
Interpersonal Skills: Relates well with others; Treats others with respect; Shares views in a tactful way; Demonstrates diplomacy by approaching others about sensitive issues in non-threatening ways; Considers and responds appropriately to the needs, feelings, and capabilities of others; Fosters an environment conducive to open, transparent communication among all levels and positions; Takes the initiative to get to know internal and external customers.
Problem Solving: Uses rigorous logic and methods to solve difficult problems with effective solutions; Probes all available sources for answers; Can see hidden problems; Is excellent at honest analysis; Looks beyond the obvious and doesn't stop at the first answers.
Organizing: Uses his/her time effectively and efficiently; Concentrates his/her efforts on the more important priorities; Can attend to a broader range of activities as a result of organizing time efficiently; Can gather resources (people, funding, material, support) to get things done; Can orchestrate multiple activities at once to accomplish a goal; Arranges information and files in a useful manner.
Learning and GrowthTakes Action to Meet the Needs of Others Supplemental Information HOW TO APPLY:To ensure consideration, please complete the online job application and profile at
You must attach in your application package the following:- Letter of Interest specifically addressing the qualifications listed in this announcement.
- Three professional references contact information (if not listed on the application).
**All requested materials must be submitted. Incomplete or late application materials will not be accepted. Failure to follow application process may disqualify you from further consideration.**
Please read the supplemental questions carefully and answer completely. Incomplete responses, including "please see resume" may disqualify you from further consideration.
The information provided in your application must support your selected answers in the application questions. Answers will be verified, and documentation may be required. Responses not supported in your application will disqualify you for consideration of employment from this recruitment.
This position is included in the non-supervisory bargaining unit represented by the Washington Federation of State Employees (WFSE). For more information:
Want to join a great organization? The Washington State Parks and Recreation Commission manages one of the largest, most diverse and beautiful parks systems in the country. With more than 138,000 acres, the system includes 124 developed parks, including 19 marine parks, 11 historical parks, 35 heritage sites, 13 interpretive centers and approximately 500 miles of long-distance recreation trails. And the agency is staffed with nearly 1000 employees (summers), who are some of the most passionate employees you'll find anywhere We love what we manage and what we do. For more information on Washington State Parks, click .
Diversity Policy Statement:The Washington State Parks and Recreation Commission is an equal opportunity employer. We strive to build a workplace culture that is welcoming and inclusive in which all employees feel respected and empowered to bring their unique ideas to the agency. At State Parks, we believe that embracing diverse backgrounds and experiences is essential to growing a strong workforce. We encourage applicants underrepresented in natural resources and outdoor recreation fields to apply, including but not limited to women, Black, Indigenous and people of color (BIPOC), individuals with disabilities, neurodivergent individuals, disabled and Vietnam era veterans, persons over 40 years of age, and individuals who identify as a part of the 2SLGBTQ+ community.
Persons desiring any accommodations in the application process or this job announcement in an alternative format may contact the human resources office at . Applicants who are deaf or hearing impaired may call through the Washington Relay Service by dialing 7-1-1 or 1-.
For information about this position and job duties, please contact James Minkler at James.Minkler@parks.wa.gov or .For information about the hiring process, please contact Wendy Vandel at or .All applicants with a legal right to work in the United States are encouraged to apply.
Job Alerts to receive a list of new job postings at Parks.
More than Just a Paycheck!Employee benefits are not just about the kind of services you get, they are also about how much you may have to pay out of pocket. Washington State offers one of the most competitive benefits packages in the nation.
We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. That's why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs.
Read about our benefits:The following information describes typical benefits available for full-time employees who are expected to work more than six months. Actual benefits may vary by appointment type or be prorated for other than full-time work (e.g. part-time); view the job posting for benefits details for job types other than full-time.
Note: If the position offers benefits which differ from the following, the job posting should include the specific benefits.
Insurance BenefitsEmployees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state.
Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax-deferred dollars toward their health care expenses. Employees are also covered by basic life and long-term disability insurance, with the option to purchase additional coverage amounts.
To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs.
Dependent care assistance allows the employee to save pre-tax dollars for a child or elder care expenses.
Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction.
The Washington State Employee Assistance Program promotes the health and well-being of employees.
Retirement and Deferred CompensationState Employees are members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems' web site.
Employees also have the ability to participate in the Deferred Compensation Program (DCP). This is a supplemental retirement savings program (similar to an IRA) that allows you control over the amount of pre-tax salary dollars you defer as well as the flexibility to choose between multiple investment options.
Social SecurityAll state employees are covered by the federal Social Security and Medicare systems. The state and the employee pay an equal amount into the system.
Public Service Loan ForgivenessIf you are employed by a government or not-for-profit organization, and meet the qualifying criteria, you may be eligible to receive student loan forgiveness under the Public Service Loan Forgiveness Program.
Holidays Full-time and part-time employees are entitled to paid holidays and one paid personal holiday per calendar year.
Note: Employees who are members of certain Unions may be entitled to additional personal leave day(s), please refer to position specific Collective Bargaining Agreements for more information.
Full-time employees who work full monthly schedules qualify for holiday compensation if they are employed before the holiday and are in pay status for at least 80 nonovertime hours during the month of the holiday; or for the entire work shift preceding the holiday.
Part-time employees who are in pay status during the month of the holiday qualify for the holiday on a pro-rata basis. Compensation for holidays (including personal holiday) will be proportionate to the number of hours in pay status in the month to that required for full-time employment, excluding all holiday hours. Pay status includes hours worked and time on paid leave.
Sick Leave Full-time employees earn eight hours of sick leave per month. Overtime eligible employees who are in pay status for less than 80 hours per month, earn a monthly proportionate to the number of hours in pay status, in the month to that required for full-time employment. Overtime exempt employees who are in pay status for less than 80 hours per month do not earn a monthly accrual of sick leave.
Sick leave accruals for part-time employees will be proportionate to the number of hours in pay status, in the month to that required for full-time employment. Pay status includes hours worked, time on paid leave and paid holiday.
Vacation (Annual Leave)Full-time employees accrue vacation leave at the rates specified in (1) or the applicable collective bargaining agreement (CBA). Full-time employees who are in pay status for less than 80 nonovertime hours in a month do not earn a monthly accrual of vacation leave.
Part-time employees accrue vacation leave hours in accordance with (1) or the applicable collective bargaining agreement (CBA) on a pro rata basis. Vacation leave accrual will be proportionate to the number of hours in pay status, in the month to that required for full-time employment.
Pay status includes hours worked, time on paid leave and paid holiday.
As provided in , an employer may authorize a lump-sum accrual of vacation leave or accelerate the vacation leave accrual rate to support the recruitment and/or retention of a candidate or employee for a Washington Management Service position. Vacation leave accrual rates may only be accelerated using the rates established WAC 357-31-165.
Note: Most agencies follow the civil service rules covering leave and holidays for
exempt employees even though there is no requirement for them to do so. However, agencies are required to adhere to the applicable RCWs pertaining holidays and leave.
Military LeaveWashington State supports members of the armed forces with 21 days paid military leave per year.
Bereavement Leave Most employees whose family member or household member dies, or for loss of pregnancy, are entitled to five (5) days of paid bereavement leave. In addition, the employer may approve other available leave types for the purpose of bereavement leave.
Additional LeaveLeave Sharing
Family and Medical Leave Act (FMLA)
Leave Without Pay
Please visit the State HR Website for more detailed information regarding benefits.
Updated 01-07-2026
01
Please select the answer that describes how you meet the qualifications for this position.
- Bachelor's degree in computer science, management information systems, or closely related field AND (2) two years of experience in information technology with a majority focus within security.
- At least six (6) years of progressive experience in information technology with a majority focus within security.
- None of the above.
02
Please list when and where you received your experience in consultative, administrative, or supervisory experience in information security analysis, information security system implementations, and security application configuration and maintenance. If this does not apply, enter "N/A".
03
How much experience do you have with developing, implementing, and enforcing organization/agency information systems security policy, operating procedures, and technical standards?
- I do not have this experience.
- I have some experience, but less than 1 year.
- I have 1 - 2 years of experience.
- I have 2 - 3 years of experience.
- I have 3 - 4 years of experience.
- I have 4 - 5 years of experience.
- I have over 5 years of experience.
04
How much experience do you have with designing and applying security controls and processes for securing the organization/agency?
- I do not have this experience.
- I have some experience, but less than 1 year.
- I have 1 - 2 years of experience.
- I have 2 - 3 years of experience.
- I have 3 - 4 years of experience.
- I have 4 - 5 years of experience.
- I have over 5 years of experience.
05
Please briefly describe a few of the security solutions you have developed, what was your process and was it successful? If this does not apply, enter "N/A".
06
How much experience do you have with identifying and resolving information security risks and incidents that may adversely impact organization/agency operations or projects?
- I do not have this experience.
- I have some experience, but less than 1 year.
- I have 1 - 2 years of experience.
- I have 2 - 3 years of experience.
- I have 3 - 4 years of experience.
- I have 4 - 5 years of experience.
- I have over 5 years of experience.
07
How much experience do you have with Compliance management, specifically NIST, CJIS, PCI, and OCIO 141.10?
- I do not have this experience.
- I have some experience, but less than 1 year.
- I have 1 - 2 years of experience.
- I have 2 - 3 years of experience.
- I have 3 - 4 years of experience.
- I have 4 - 5 years of experience.
- I have over 5 years of experience.
08
If you do have experience on question #7, please describe your experience(s) in as much detail as you deem necessary. If you do not have experience, please type 'N/A'.
09
How much experience do you have with managing and maintaining security controls in Azure?
- I do not have this experience.
- I have some experience, but less than 1 year.
- I have 1 - 2 years of experience.
- I have 2 - 3 years of experience.
- I have 3 - 4 years of experience.
- I have 4 - 5 years of experience.
- I have over 5 years of experience.
10
Please select which IT skills you feel you have senior competency level (check all that apply):
- Information security principles and industry best practices and standards.
- Systems / Network security.
- Web Application & development security.
- Risk Management.
- Network discovery and vulnerability assessments.
- Malware analysis.
- Compliance audits.
- Log management.
- Ability to identify and document security vulnerabilities and their potential business impact.
- Implementing and monitoring security controls.
11
Candidates with professional certifications such as: CISSP, CCSP, CRISC, GSEC, CEH, or Security+, will be given preference points. Please be sure to attach any certifications you might have to your application.
- Yes, I have attached certifications.
- No, I do not have any of the listed IT Security certifications.
Required Question
