Information Systems Security Specialist

City-of-Las-Cruces; Las Cruces (NM); Presencial; USD 65 000 - 90 000; Tempo integral

Resumo da oferta

The City of Las Cruces is seeking a security-focused IT professional to monitor and maintain information security policies and programs across City information systems. Work spans multiple locations with office-based duties and field exposure, involving risk assessment, vulnerability management, and security reporting.

Ideal candidates will have a relevant associate degree, at least one year in information security, and familiarity with TCP/IP capture, SMTP header analysis, and Windows server

Qualificações

• At least one year of cumulative, paid work experience in an information security role.
• Familiarity with TCP/IP packet capture, trace, and analysis, and SMTP header analysis.
• Education aligned with an associate’s degree in CS/IS or related field; certifications may supplement.
• Preferred certifications: CompTIA Security+, SANS GIAC, MCSE, CCNA-Security, MCSE, or similar.

Responsabilidades

• Identify, investigate, and document security issues and violations; conduct assessments and audits of IT systems and processes.
• Prepare and present reports; evaluate IT systems to identify security risks and recommend solutions and controls.
• Identify, track, and remediate vulnerabilities; notify management of breaches and issues and propose mitigations.
• Review server/infrastructure placement and configurations; ensure systems are operational and compliant.
• Assess system configurations and patch levels; enforce security standards and access policies.
• Develop, deploy, and maintain security systems, servers, and applications as directed.
• Participate in meetings to communicate security needs and provide recommendations.

Conhecimentos

Attention to detail

Analytical thinking

Communication skills

Deadline management

Problem solving

Formação académica

Associate's degree in CS/IS related field

1 year enterprise Windows admin experience

MS Exchange experience

Ferramentas

Microsoft Windows Server

Cisco IOS

Linux variants

Active Directory

Descrição da oferta de emprego

Monitors and maintains information security and privacy policies and programs to provide protection and confidentiality of City information systems and data generated, stored, and transmitted electronically.

Work is performed in a standard office environment, and at various locations throughout the City with exposure to all types of weather and traffic conditions. Occasional exposure to heat, dust, construction environments, and electrical equipment.

Moderate physical demands; mostly desk work requiring the ability to lift and carry personal computer equipment.

Position involves competing demands, performing multiple tasks, working to deadlines, occasional work beyond normal business hours, and responding to customer issues. Regular attendance is an essential function of this job to ensure continuity of services. Position is subject to drug testing in accordance with applicable State and Federal regulations and City of Las Cruces policies.

Meeting or exceeding the minimum requirements does not guarantee an invitation to participate in the process.

FIRST CONSIDERATION MAY BE GIVEN TO CURRENT CITY OF LAS CRUCES EMPLOYEES WHO MEET THE MINIMUM REQUIREMENTS.

Full-time, regular, exempt position.

This position is graded RX22.

Environmental Factors:

• Identifies, investigates, and documents specific security issues and violations; conducts and performs assessments and audits of information technology systems and processes.

Physical Factors:

• Prepares and presents various special and recurring reports; performs various evaluations and analysis on Information systems to identify security risks and report on recommendations and solutions.

Work Situation Factors:

• Identifies, documents, tracks, and evaluates vulnerabilities and risks; determines tasks necessary to remediate issues identified; provides notification to management of security breaches or potential issues and recommends solutions in efforts to protect integrity of information and system security.

• Reviews and evaluates placement and role of servers, network devices, and infrastructure; evaluates City needs and implements options for information systems; collaborates with various other departments to ensure that all information systems, servers, networks, and infrastructure are operational and effective.

• Assesses configuration of systems and network devices and adherences to standards for controls; evaluates OS patch levels, system logging and monitoring controls, security of system configuration against defined security standards, account policies, user rights, file system and registry security, local and group security policies, network services configurations, IP addressing and routing, access control lists, traffic filtering rules, logging configurations, IPSEC, SSH, tunneling protocols, and VPNs.

• Manages, configures, deploys, and maintains standard security systems, servers, and applications as directed and required to successfully collect and analyze network information services.

• Participates, engages, and provides feedback and recommendations in various meetings; understands security needs to identify and communicate them effectively.

A sufficient combination of relevant education and job-related experience that has reasonably prepared the applicant to successfully perform the duties and responsibilities of the position, such as those listed above. Work experience must include at least one (1) year of cumulative, paid work experience in an information security related role. Applicant must demonstrate familiarity and capability with TCP/IP packet capture, trace, and analysis, and SMTP header analysis.

PREFERRED QUALIFICATIONS:

Equivalent to an associate's degree in Computer Science, information systems management or related field AND one (1) year enterprise-level MS Windows systems administration experience in a multi-server, networked environment using MS exchange; one (1) year of which must be documented full-time experience in deployment and management of IT security technologies in an enterprise environment. A combination of education, experience, and training may be applied in accordance with City of Las Cruces policy.

Licenses/Certification(s)

Valid driver's license is required. Position requires an acceptable driving record in accordance with City of Las Cruces policy. CompTIA Security + Certification, SANS GIAC (Global Information Assurance Certification), Microsoft Windows Security for workstations and servers, MCSA (Microsoft Certified Systems Administrator), Microsoft Windows Systems Hardening, CCNA-Security (Cisco Certified Network Associate Security), or Microsoft Certified System Engineer (MCSE), or other relevant certifications or licenses may be preferred.

Knowledge of:

applicable standards, techniques, policies, processes, and procedures related to internal controls, risk assessments, business processes, and internal IT control testing; networking, Microsoft Active Directory, and network design; wireless technologies, intrusion analysis, incident response, and methodology; capabilities of computer software, hardware, and operating systems; security technologies and practices; industry standards and best practices, frameworks, encryption technologies, and firewall administration; Microsoft Windows client malicious software (malware) detection and remediation procedures; multiple operating systems configuration and management including, but not limited to, Microsoft Windows client, Microsoft Windows server, Cisco IOS, and common commercial Linux variants; command line shell scripting and configuration management; job related terminology including technical terms; current principles of record keeping and records management; principles and practices of effective research methods and data analysis, customer service, and problem resolution techniques; occupational and environmental safety and health hazards, and safety practices; safe and effective use and maintenance of related tools, materials, and equipment; current methods and standards for preparing effective business correspondence; correct English usage, grammar, composition, spelling, punctuation and vocabulary; business and personal computers and related software applications; City organization, operations, policies, and procedures to effectively perform the required functions and duties of the position.

Ability to:

perform a variety of duties and responsibilities and assess and prioritize multiple tasks, projects, and demands to meet deadlines; ensure appropriate levels of customer service to achieve expectations and meet objectives; read, understand, and assure compliance with a variety of policies, procedures, rules, standards, and regulations governing related activities and functions; collect applicable information and maintain accurate and timely records; maintain confidentiality of information and data; communicate effectively orally and in writing and use interpersonal skills to sufficiently exchange or convey information and receive work direction; prepare and present accurate and reliable information and reports; establish and maintain effective and appropriate working relationships with employees, other agencies, and the public; safely and effectively operate relevant tools, equipment, and motorized vehicles; navigate across even and uneven surfaces; timely and accurately enter data and update records using various mediums and formats; take initiative and exercise sound independent judgment within established procedural guidelines andcarry out primary responsibilities in accordance with all governing regulations, statutes, and proceduresto ensure achievement of goals and objectives.

Skills in:

reading, understanding, and applying relevant rules, ordinances, codes, regulations, policies, and procedures; effectively managing assignments; responding to inquiries timely and within the scope of delegated authority; responding appropriately, maintaining objectivity and freedom from prejudice, and exercising sound judgment and understanding in all interactions; effectively working independently, or as a team member, in various environments with changing priorities; preparing and presenting various reports, documents, forms, and correspondence; researching information, analyzing data, maintaining accurate records, and updating information in various mediums and formats; operating a personal computer with installed generic and specialized software; preparing and presenting information in a clear and concise manner; demonstrating appropriate and effective interpersonal communication and conflict resolution skills; performing highly effective support in assigned areas.