The Arizona Department of Economic Security (DES) is the state's primary human services agency, headquartered in Phoenix and employing over 5,000 people. The agency's attack surface is massive: it processes, stores, and transmits sensitive personal data - Social Security numbers, financial records, health information, immigration status - for nearly 3 million Arizonans across programs like unemployment insurance, nutrition assistance, and child care services. This is high-volume PII with real downstream consequences if compromised.
From a cybersecurity standpoint, DES operates a complex digital environment spanning eligibility systems, benefits portals, and case management platforms that connect to federal databases and other state agencies. The threat model includes everything from credential-stuffing attacks on public-facing portals to insider risk across a large workforce, ransomware targeting critical service delivery, and fraud attempts exploiting benefits systems. Securing this infrastructure means defending not just data but operational continuity - the agency's work directly affects vulnerable populations who can't wait out a breach.
Roles within DES likely touch identity and access management, endpoint protection, vulnerability management, and incident response across a hybrid environment that must meet both state and federal compliance frameworks. The scope of services - aging care, developmental disabilities, refugee resettlement, health care - means the security team has to understand diverse data classification requirements and regulatory obligations simultaneously. This is government security work with tangible stakes: keeping essential services running and protecting people who depend on them.
