Cybersecurity Engineer - Incident Response & Threat Mitigation

CITY OF PORT ORANGE; Town of Florida (NY); On-site; USD 70,000 - 100,000; Full time

Job summary

The City of Port Orange seeks a cybersecurity analyst to protect its IT and OT systems across on‑premises, cloud, and endpoints. You will monitor for threats, investigate and respond to incidents, and support vulnerability management to strengthen enterprise cybersecurity programs.

This in‑office role requires collaboration with IT staff, documentation of findings, and ongoing learning to ensure reliable services for City operations.

Qualifications

• Bachelor’s degree in computer science, Information Systems, Cybersecurity or related field is required.
• Minimum of three (3) years’ experience in technology support, security operations, incident response, and/or event handling.
• Minimum of three (3) years of experience with security products including IPS/IDS, AV, Anti-Malware, DLP, MFA, Network Proxies, Sensitive Data Scanning, and Content Filtering is preferred.
• Knowledge of computer hardware, networking, operating systems (Windows and Linux), and enterprise IT infrastructure.
• Understanding of network technologies includes routing, switching, DNS, SMTP, NTP, and SNMP.
• Experience with enterprise security tools such as SIEM, EDR/XDR, firewalls, email gateways, and vulnerability management platforms.
• Knowledge of security considerations in hybrid and cloud environments (e.g., AWS, Azure, Microsoft 365).
• Ability to analyze security events, assess risk, and recommend mitigations.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to clearly document findings and communicate technical information verbally and in writing.
• Willingness and ability to continuously learn and apply new technologies.
• Demonstrated ability to mentor others, lead incident response efforts, and contribute to secure system design and automation.

Responsibilities

• Monitor enterprise systems for security anomalies using SIEM, EDR/XDR, NAC, IDPS and related technologies.
• Investigate security alerts, identify indicators of compromise (IOCs), and respond to cybersecurity events.
• Escalate complex incidents and collaborate with IT staff.
• Analyze threat intelligence to identify relevant risks and communicate findings to stakeholders.
• Prepare incident, investigation, and root cause analysis reports.
• Recommend detection improvements, support automation of response workflows, and lead initial incident handling.
• Create and maintain metrics, perform event/incident/risk analyses, and generate reports.
• Configure and maintain cybersecurity systems such as firewalls, email gateways, and monitoring tools.
• Support Help Desk escalations and administer IAM/certificates; document procedures and standards.
• Contribute to cybersecurity awareness programs and phishing assessments.

Skills

Analytical thinking

Troubleshooting

Documentation

Mentoring

Communication

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

IPS/IDS

EDR/XDR

Firewalls

Email gateways

SIEM

Vulnerability management

MFA

DLP

Proxies

Cloud platforms

Job description

The City of Port Orange seeks a cybersecurity analyst to protect its IT and OT systems across on‑premises, cloud, and endpoints. You will monitor for threats, investigate and respond to incidents, and support vulnerability management to strengthen enterprise cybersecurity programs.

This in‑office role requires collaboration with IT staff, documentation of findings, and ongoing learning to ensure reliable services for City operations.