Information Systems Security Specialist

City of Las Cruces; Las Cruces (NM); On-site; USD 65,000 - 90,000; Full time

Job summary

City of Las Cruces seeks an information security professional to monitor and maintain information security and privacy policies and programs protecting city information systems and data.

The role involves identifying, investigating, and documenting security issues, evaluating systems for risk, and coordinating with departments to ensure operational security and compliance with applicable regulations. Some duties require flexibility and readiness to respond to issues as they arise.

Qualifications

• At least 1 year of cumulative, paid work experience in an information security related role.
• Familiarity with TCP/IP packet capture, trace, and analysis, and SMTP header analysis.

Responsibilities

• Identify, document, track, and evaluate vulnerabilities and risks; determine remediation tasks and notify management of breaches.
• Review and evaluate placement of servers, network devices, and infrastructure; work with other departments to keep information systems operational and secure.
• Configure, deploy, and maintain standard security systems, servers, and applications as needed to collect and analyze network information services.
• Participate in meetings to discuss security needs and communicate recommendations effectively.

Education

Associate's degree or equivalent

Tools

TCP/IP analysis

SMTP header analysis

Job description

Monitors and maintains information security and privacy policies and programs to provide protection and confidentiality of City information systems and data generated, stored, and transmitted electronically.

Work is performed in a standard office environment, and at various locations throughout the City with exposure to all types of weather and traffic conditions. Occasional exposure to heat, dust, construction environments, and electrical equipment.

Moderate physical demands; mostly desk work requiring the ability to lift and carry personal computer equipment.

Position involves competing demands, performing multiple tasks, working to deadlines, occasional work beyond normal business hours, and responding to customer issues. Regular attendance is an essential function of this job to ensure continuity of services. Position is subject to drug testing in accordance with applicable State and Federal regulations and City of Las Cruces policies.

Meeting or exceeding the minimum requirements does not guarantee an invitation to participate in the process.

FIRST CONSIDERATION MAY BE GIVEN TO CURRENT CITY OF LAS CRUCES EMPLOYEES WHO MEET THE MINIMUM REQUIREMENTS.

Full-time, regular, exempt position.

This position is graded RX22.

Environmental Factors:

• Identifies, investigates, and documents specific security issues and violations; conducts and performs assessments and audits of information technology systems and processes.

Physical Factors:

• Prepares and presents various special and recurring reports; performs various evaluations and analysis on Information systems to identify security risks and report on recommendations and solutions.

Work Situation Factors:

• Identifies, documents, tracks, and evaluates vulnerabilities and risks; determines tasks necessary to remediate issues identified; provides notification to management of security breaches or potential issues and recommends solutions in efforts to protect integrity of information and system security.

• Reviews and evaluates placement and role of servers, network devices, and infrastructure; evaluates City needs and implements options for information systems; collaborates with various other departments to ensure that all information systems, servers, networks, and infrastructure are operational and effective.

• Assesses configuration of systems and network devices and adherences to standards for controls; evaluates OS patch levels, system logging and monitoring controls, security of system configuration against defined security standards, account policies, user rights, file system and registry security, local and group security policies, network services configurations, IP addressing and routing, access control lists, traffic filtering rules, logging configurations, IPSEC, SSH, tunneling protocols, and VPNs.

• Manages, configures, deploys, and maintains standard security systems, servers, and applications as directed and required to successfully collect and analyze network information services.

• Participates, engages, and provides feedback and recommendations in various meetings; understands security needs to identify and communicate them effectively.

A sufficient combination of relevant education and job-related experience that has reasonably prepared the applicant to successfully perform the duties and responsibilities of the position, such as those listed above. Work experience must include at least one (1) year of cumulative, paid work experience in an information security related role. Applicant must demonstrate familiarity and capability with TCP/IP packet capture, trace, and analysis, and SMTP header analysis.

PREFERRED QUALIFICATIONS:

Equivalent to an associate's degree in Computer Science, information systems management or related field AND one (1) year enterprise-level MS Windows systems administration experience in a multi-server, networked environment using MS exchange; one (1) year of which must be documented full-time experience in deployment and management of IT security technologies in an enterprise environment. A combination of education, experience, and training may be applied in accordance with City of Las Cruces policy.

Licenses/Certification(s)

Valid driver's license is required. Position requires an acceptable driving record in accordance with City of Las Cruces policy. CompTIA Security + Certification, SANS GIAC (Global Information Assurance Certification), Microsoft Windows Security for workstations and servers, MCSA (Microsoft Certified Systems Administrator), Microsoft Windows Systems Hardening, CCNA-Security (Cisco Certified Network Associate Security), or Microsoft Certified System Engineer (MCSE), or other relevant certifications or licenses may be preferred.

Knowledge of:

applicable standards, techniques, policies, processes, and procedures related to internal controls, risk assessments, business processes, and internal IT control testing; networking, Microsoft Active Directory, and network design; wireless technologies, intrusion analysis, incident response, and methodology; capabilities of computer software, hardware, and operating systems; security technologies and practices; industry standards and best practices, frameworks, encryption technologies, and firewall administration; Microsoft Windows client malicious software (malware) detection and remediation procedures; multiple operating systems configuration and management including, but not limited to, Microsoft Windows client, Microsoft Windows server, Cisco IOS, and common commercial Linux variants; command line shell scripting and configuration management; job related terminology including technical terms; current principles of record keeping and records management; principles and practices of effective research methods and data analysis, customer service, and problem resolution techniques; occupational and environmental safety and health hazards, and safety practices; safe and effective use and maintenance of related tools, materials, and equipment; current methods and standards for preparing effective business correspondence; correct English usage, grammar, composition, spelling, punctuation and vocabulary; business and personal computers and related software applications; City organization, operations, policies, and procedures to effectively perform the required functions and duties of the position.

Ability to:

perform a variety of duties and responsibilities and assess and prioritize multiple tasks, projects, and demands to meet deadlines; ensure appropriate levels of customer service to achieve expectations and meet objectives; read, understand, and assure compliance with a variety of policies, procedures, rules, standards, and regulations governing related activities and functions; collect applicable information and maintain accurate and timely records; maintain confidentiality of information and data; communicate effectively orally and in writing and use interpersonal skills to sufficiently exchange or convey information and receive work direction; prepare and present accurate and reliable information and reports; establish and maintain effective and appropriate working relationships with employees, other agencies, and the public; safely and effectively operate relevant tools, equipment, and motorized vehicles; navigate across even and uneven surfaces; timely and accurately enter data and update records using various mediums and formats; take initiative and exercise sound independent judgment within established procedural guidelines andcarry out primary responsibilities in accordance with all governing regulations, statutes, and proceduresto ensure achievement of goals and objectives.

Skills in:

reading, understanding, and applying relevant rules, ordinances, codes, regulations, policies, and procedures; effectively managing assignments; responding to inquiries timely and within the scope of delegated authority; responding appropriately, maintaining objectivity and freedom from prejudice, and exercising sound judgment and understanding in all interactions; effectively working independently, or as a team member, in various environments with changing priorities; preparing and presenting various reports, documents, forms, and correspondence; researching information, analyzing data, maintaining accurate records, and updating information in various mediums and formats; operating a personal computer with installed generic and specialized software; preparing and presenting information in a clear and concise manner; demonstrating appropriate and effective interpersonal communication and conflict resolution skills; performing highly effective support in assigned areas.