Cybersecurity Engineer Journey

Department: Cybersecurity Operations

Location:

Sacramento, CA, US, 95817

Category: Information Technology/Telecommunications

Minimum Pay Rate: $114,712.00

Maximum Pay Rate: $151,985.60

Civil Service Status: Civil Service

Apply by Date: 11/05/2025

Posting Type: Open

This position is a journey IT Cybersecurity Engineer position working in SMUD's IT Cybersecurity Engineering Team. Journey IT Cybersecurity Engineers work with SMUD's IT Infrastructure, IT Applications, Integrated Security Operations Center Engineers, and Cybersecurity Risk Analysts to lead, assess, engineer, maintain and operate IT Cybersecurity solutions. These solutions support SMUD's IT Cybersecurity risk and compliance standards.

Purpose

To provide specialized enterprise-wide security engineering and manage cyber protection, defense, design, development, implementation, and operation risk to our Information, Information and Operational Technology (IT/OT) Systems, and Network Infrastructures.

Nature and Scope

There are four (4) levels in this job classification series that have similar job content but with progressively more challenging degrees and levels of skill, responsibility, knowledge, experience and qualification requirements:

Flex Classifications (that permit progression from lower-level classes to higher level classes without examination based upon assessment of an individual's experience and performance) within the series:

- Entry: Incumbent acquires knowledge, skills and abilities to perform the tasks associated within the series but are not yet demonstrating these at the Journey level.

- Journey: Incumbent is demonstrating the required skills and knowledge to independently perform the full scope of the job.

Non-Flex Classifications (that promote from lower-level classes to higher level classes and require an examination, such as an interview, based upon individual experience and performance) within the series:

- Senior: Advanced journey level resource who is responsible for advanced assignments, as dictated by the work needing to be performed. May serve in a lead/supervisory capacity.

- Principal: Subject matter expert/lead level/supervisory and is responsible for leading the most advanced work, as dictated by the work needing to be performed.

Entry to Journey: Incumbents at the entry level are required to successfully “progress” to the journey level within 60 months of appointment to remain within the job series.

Seniors and Principals must be hired through a promotional process and do not automatically progress from lower levels in the series.

Duties and Responsibilities

- SMUD’s Cybersecurity Engineer Journey is responsible for independently performing engineering tasks in support of Senior and Principal cybersecurity engineers to assist with the following work roles:

- Defensive Cybersecurity: Evaluate data collected from various cybersecurity defense tools to mitigate risks.

- Digital Forensics: Assess digital evidence from computer security incidents to derive useful information in support of system and network vulnerability mitigation.

- Incident Response: Investigate, assess, and respond to network cybersecurity incidents.

- Infrastructure Support: Test, implement, deploy, maintain, and administer infrastructure hardware and software for cybersecurity.

- Insider Threat Assessment: Identify and assess the capabilities and activities of cybersecurity insider threats; produce findings to help initialize and support law enforcement and counterintelligence activities and investigations.

- Threat Assessment: Collect, process, assess, and disseminate cybersecurity threat assessments; develop cybersecurity indicators to maintain status awareness of the highly dynamic operating environment.

- Vulnerability Assessment: Assess systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy; measure effectiveness of defense-in-depth architecture against known vulnerabilities.

- Cybercrime: Investigate cyberspace intrusion incidents and crimes; apply tactics, techniques, and procedures for a full range of investigative tools and processes and appropriately balances the benefits of prosecution versus intelligence gathering.

- Digital Evidence Assessment: Identify, collect, examine, and preserve digital evidence using controlled and documented analytical and investigative techniques.

- Systems Testing and Evaluation: Plan, prepare, and execute system tests; evaluate test results against specifications and requirements; and report test results and findings.

- Cybersecurity Architecture: Ensure that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.

Required Education

- Bachelor's degree in Cybersecurity, Information Security, Information Technology or closely related field (i.e. Computer Science, Systems Engineering, Electrical Engineering), or equivalent experience. If no degree, seven or more (7+) years of relevant experience is required.

Required Experience Qualifications

- Three or more (3+) years of progressively relevant professional or technical experience in cybersecurity and/or information security.

Required Licenses/Certificates

- One or more (1+) professional certification with an emphasis on Cybersecurity, Information Security, Security and/or Network Administration, or Audit (e.g., CompTIA Security+, GSEC, GFACT, CISF, GISCP, CEH, and CPEN) is required, or an industry recognized certification must be obtained within one year of hire and maintained.

Knowledge Of

Practices of system security engineering, design, development, analysis, testing and security administration. Methods and techniques of evaluating security and privacy requirements and developing secure solutions for SMUD systems. Methods and techniques of developing data security, integrity, backup and recovery processes. Project management methodologies. Principles and practices of systems and procedures analysis and design. English composition and business writing and vocabulary standards; methods and techniques for report preparation and writing; methods and techniques for record keeping; modern office practices and procedures.

Skills To

Troubleshoot, evaluate and problem solve; learn new skills quickly with minimal guidance; achieve project schedules and milestones; work in a team environment with aggressive deadlines and multiple priorities while remaining a team player; facilitate and present; demonstrate strong verbal and written communication skills as well as strong interpersonal skills; listen, learn, speak up, and mentor; demonstrate attention to detail; work with different groups and on diverse projects as a partner; perform privacy and/or security reviews including regulatory and industry assessments, risk assessments, information inventory and data mapping, vendor management security assessments, and additional privacy or cybersecurity compliance related projects.

Desirable Qualifications

- Knowledge of cybersecurity and privacy principles.

- Knowledge of cloud cybersecurity best practices.

- Knowledge of container technology and best practices.

- Strong understanding of cyber threats and vulnerabilities.

- Ability to accurately define incidents, problems, and events in the trouble ticketing system.

- Ability to operate common network tools (e.g., ping, traceroute, nslookup).

- Ability to monitor measures or indicators of system performance and availability.

- Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

- Advanced level knowledge of computer networking concepts and protocols, and network security methodologies.

- Knowledge of specific operational impacts of cybersecurity lapses.

- Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).

- Knowledge of operating systems.

- Knowledge of security system design tools, methods, and techniques.

- Knowledge of server and client operating systems.

- Knowledge of systems administration concepts.

- Knowledge of virtualization technologies and virtual machine development and maintenance.

- Knowledge of operating system command-line tools.

- Knowledge of how to use network analysis tools to identify vulnerabilities.

Physical Requirements

Applicants must be able to perform the essential job functions with or without a reasonable accommodation.

Sacramento Municipal Utility District (SMUD) - Who We Are

As the nation's sixth-largest community-owned electric service provider, we're proud of our reputation as one of the best places to work in Sacramento. Our employees tell us in our engagement surveys they're "Happy, satisfied and engaged" which helps create a workplace that best serves our customers. Sacramento was named as the 2nd happiest place to work in America by Forbes Magazine. Lake Tahoe, San Francisco and the world-renowned Napa Valley are within easy driving distance of our locations.

Our Commitment to Diversity & Inclusion

SMUD celebrates diversity, and inspires an inclusive culture based on trust and respect to create belonging and connection among our employees, customers, and communities. By working together, we are powering positive, equitable opportunities for all. We aspire to be a workplace where you can be yourself, achieve your best, and thrive together.

An example of our commitment to Diversity, Equity, Inclusion, and Belonging is when SMUD signed the California Equal Pay Pledge in 2020. This requires equal pay for employees who perform “substantially similar work,” when viewed as a composite of skill, effort, and responsibility at the time those employees started within that classification. As such, initial hiring salary range is not subject to negotiation and salaries will vary over time based on performance.

SMUD is proud to be an equal opportunity employer. We do not discriminate in employment decisions on the basis of race, color, religion, gender (including pregnancy), national origin, political affiliation, sexual orientation, gender identity or expression, marital status, disability, genetic information, age, veteran status, or any other applicable legally protected characteristic. All employment decisions are made on the basis of individual qualifications, merit, and business needs and interests.

Why Sacramento, California?

The capitol of California, Sacramento is the state's sixth-largest city, and the 35th largest in the U.S. Local universities include California State University, University of the Pacific's McGeorge School of Law, and the University of California, Davis and several competitive community colleges. The UC Davis Medical Center, a world-renowned research hospital, is one of more than a dozen hospitals and shared services centers in the Sacramento region. Part of the agriculturally-rich Central Valley, Sacramento is at the forefront of the farm-to-fork food movement. Northern California is home to some of the country's top technology companies, including Google and LinkedIn, and a multitude of startups in many industries. Sacramento is home to the NBA Kings, the River Cats (AAA baseball), the Republic FC (soccer) and the San Francisco Giants, NBA Warriors and NFL 49er's aren't far away. Sacramento offers an affluent liberal arts community with Broadway, Mondavi Center, Crocker Museum and summer musical theater to name a few.

Hybrid Work

This position will be required to work onsite one or more days a week on a regular basis; sometimes more or less, depending on the work and, at any of our SMUD locations. SMUD takes pride in powering the Sacramento region community where we live and work. We value the strong working relationships we develop with our colleagues. Our approach to remote work will continue to evolve. Please be aware that should SMUD’s business needs change, emergencies occur, or various other reasons arise, you may be required to report onsite on a part-time or full-time basis.

CalPERS

SMUD is a CalPERS agency. As a member of the California Public Employees’ Retirement System (CalPERS), SMUD offers eligible employees access to a defined benefit pension plan along with other valuable retirement and health benefits. This program helps provide financial security both during your career and after retirement. To learn more about CalPERS and the benefits it offers, please visit www.calpers.ca.gov.

SMUD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. SMUD complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

SMUD expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of SMUD employees to perform their expected job duties is absolutely not tolerated.

Req ID: 2526

Nearest Major Market: Sacramento