Overview Of Position
This position is responsible, under general direction, for helping plan and carry out the organization's information security strategy and recommend security enhancements to management with the goal of protecting computer systems and networks. As sensitive data is more frequently stored on computer systems, and hacking and cyber-attacks grow more frequent, the organization relies on the Cyber Security Team to develop strategies to prevent, detect, respond to, and recover from Cyber Security incidents.
Essential Functions
- 35% Assist with cybersecurity tickets and requests submitted through the ticketing system.
- 20% Monitor, tune, and respond to alerts triggered by security systems.
- 20% Assist in performing forensic reviews using Microsoft/Office 365 tools and log aggregators.
- 10% Monitor, review patching activities, and perform vulnerability scans.
- 10% Develop standards, procedures, and playbooks for common cybersecurity workflows, leveraging a defense-in-depth methodology.
- 5% Identify cost-effective solutions to cybersecurity challenges and actively follow cybersecurity professionals' blogs and industry news to stay informed of emerging threats and security strategies.
Other Functions
- May perform related duties consistent with the scope and intent of the position.
Relevant Competencies
Quickly learns and integrates new technical skills and knowledge; seeks out avenues to enhance technical knowledge.
- Picks up and integrates technical skills quickly.
- Recognizes trends and effectively prepares for changes.
- Seeks out opportunities to advance one’s learning in relevant technical disciplines.
Time Management
- Focuses his/her efforts on the most important priorities.
- Uses time effectively and efficiently.
- Handles multiple-tasks effectively and efficiently.
- Values other people’s time.
Interpersonal Skills
- Relates well with others.
- Builds constructive and effective relationships.
- Considers and responds appropriately to the needs and feelings of different situations.
- Is tactful, diplomatic and demonstrates consistency and fairness.
Functional/Technical Skills
- Understands the technical aspects of the job and keeps up-to-date on key technical or functional aspects of the job.
- Applies appropriate technical/functional knowledge to address situations in a timely manner.
- Thinks of ways to apply new developments to improve organizational performance.
- Shares expertise and skills with others when appropriate.
District-Wide Core Competencies
Collaboration
- Is seen as a team player who encourages efficient and effective collaborations.
- Works skillfully in difficult situations with both internal and external groups.
- Represents his/her own interests while being open-minded to other groups.
- Builds respectful and productive relationships internally and externally.
Getting Results (Action Oriented)
- Demonstrates a strong sense of urgency about solving problems and getting work done.
- Focuses on achieving the goal even in the face of obstacles.
- Assumes responsibility for starting and finishing work with minimal supervision.
- Strives for new levels of performance.
Decision Quality & Problem Solving
- Weighs the consequences of options before making a decision.
- Applies appropriate criteria to situations for the purpose of making decisions.
- Displays self-confidence in own judgment.
- Focuses on facts and solutions rather than opinions and problems.
Integrity
- Deals with people and situations in an honest and forthright manner.
- Represents information and data accurately and completely.
- Represents the confidentiality of information and concerns shared by others.
- Takes ownership if a mistake is their own and does not blame others.
Accountability
- Takes responsibility and action as if the risks (financial or otherwise) are his or her own.
- Holds individuals and teams accountable for their actions and results.
- Initiates action even if outcome is uncertain and is willing to accept the consequences of failure.
- Aligns own activities and priorities to meet broader organizational needs.
- Demonstrates courage and confidence in his or her own ability.
KNOWLEDGE, SKILLS AND ABILITIES
Knowledge
- Knowledge of different frameworks such as NIST SP-800 (or NIST CSF) and the MITRE ATT&CK Framework
- Knowledge of disaster recovery strategies
- Knowledge of computer forensic tools
- Knowledge of the CIA Triad, including its meaning and application through security controls
- Knowledge of the difference between Administrative, Technical, and Compensating controls
- Knowledge of risk assessment/management tools, technologies and methods
- Experience with anti-virus software, intrusion detection, firewalls
- Experience with content filtering
- Knowledge of digital forensic tools
Skills
- Analyzing and documenting existing security controls and reviewing and updating related documentation
- Analyze security systems/controls and seek improvements on a continuous basis
- Evidence and chain-of-custody experience
- An understanding of best practices and how to implement them at an enterprise level
- Help educate the workforce on common threats through cyber security training and awareness
- Critical thinking skills and the ability to solve problems as they arise
- Planning, researching and developing security policies, standards and procedures
- Experience with scripting (PowerShell, Bash, Python, etc.)
Abilities
- Ability to prioritize projects
- Able to work in a fast-paced environment
- Ability to communicate effectively, both verbally and in writing, to diverse audiences
- Ability to create complete, concise, and cogent forensic reportsAbility to communicate security issues to peers and management
Typical Qualifications
EDUCATION/EXPERIENCE
Bachelor’s degree in computer science, information technology, business administration, or related field.
Equivalent work experience may substitute for the education requirement on a year-for-year basis.
- years of experience in a related field, with last one (1) year in information security.
DESIRED CERTIFICATION & LICENSES
Valid Washington State Driver's License or evidence of equivalent mobility.
Holding One Of The Following Professional Certifications Is Desired
- CISSP
- CISM
- GSEC
- CEHSecurity+
CLEARANCES
Criminal Justice fingerprint and background check.
Seattle Public Schools benefits are administered by the Washington State Healthcare Authority (HCA) under the School Employees Benefits Board (SEBB). Eligibility for benefits is determined by the number of hours employees are anticipated to work during the school year (September 1 through August 31). Any employee who is scheduled to work 630 hours or more in a year is eligible for benefits.
Salary Schedule
Please find the salary schedule associated with this role and others like it
01 Do you have a bachelor's degree or completion of equivalent training?
02 Do you have one (1) year of related cybersecurity work experience?
03 Holding One Of The Following Professional Certifications Is Desired:
- CISSP
- CISM
- GSEC
- CEH
- Security+