Information Security Supervisor

Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide. Job SummaryThe Information Security Supervisor serves as the strategic and operational leader for MNIT’s Web Application Firewall (WAF) and Application Security programs, ensuring robust, enterprise-wide protection of State of Minnesota web applications. The position is accountable for the delivery, governance, and continuous maturation of an enterprise-grade WAF platform supporting agencies across the state. This includes directing a team responsible for implementing, configuring, monitoring, and optimizing WAF services to maintain consistent and effective security controls in complex, multi-environment settings. This is a working supervisor role. In addition to providing leadership, the supervisor is expected to demonstrate strong technical competency and engage directly in hands-on operational work when necessary, including configuration, troubleshooting, tuning, and response during high-priority security events. The supervisor is recognized as an enterprise application security subject matter expert, bringing deep expertise to guide decisions, mentor staff, and shape statewide application security practices. The position also helps lead and support MNIT’s Application Security program. The team manages statewide application security scanning platforms, including dynamic application security testing (DAST) and static code analysis tools. The supervisor ensures these capabilities are effectively integrated, governed, and maintained to support secure development across the enterprise. The team provides advanced consulting and advisory services to MNIT security professionals, application development teams, and business partners—enabling them to identify vulnerabilities, understand remediation strategies, and adopt secure coding and deployment practices that protect state assets. Through effective leadership, strategic vision, technical acumen, and collaborative engagement, the Information Security Supervisor ensures MNIT’s application security capabilities are resilient, efficient, and aligned with enterprise security policies, supporting the State of Minnesota’s mission to safeguard systems, services, and data. This position requires an employee to work onsite at 600 Robert St. N., Minnesota at least 50% of the time, with limited telework available. Telework eligibility depends on residence:Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles. Qualifications Position requires a minimum of three (3) years of IT experience in IT experience in information security, cybersecurity, application security, vulnerability management, web application security, or a closely related field. Experience must include: Experience with web application security and WAF technologies.Experience with application security, vulnerability scanning, and remediation.Knowledge of enterprise networking and security technologies.Experience with OWASP frameworks and secure application development practices.Experience managing security projects, vendors, or technology solutions.Demonstrated ability to communicate clearly and effectively to foster mutual understanding and guide teams through change.Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving, with demonstrated leadership and people engagement skills that support positive user experiences and high-performing teams. Additional RequirementsIt is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following: SEMA4 Records Check (applies to current and past state employees only)Criminal History CheckReference CheckSocial Security and Address VerificationEducation VerificationCJIS Background CheckDriver's License Record CheckOther legally required checks Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.