IT Security Specialist

City of Galveston; United States; On-site; USD 70,000 - 90,000; Full time

Job summary

The City of Galveston is seeking an IT Security Specialist to safeguard its information systems and data. This role focuses on monitoring security systems, incident response, and compliance. Candidates should have a Bachelor’s degree in IT or a related field and 2 years of IT security experience.

Responsibilities include conducting vulnerability scans, supporting business continuity, and developing security policies. Desired skills include knowledge of SIEM tools and strong analytical abilities.

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• 2 years of experience in IT security or system/network administration.

Responsibilities

• Monitor the City’s SIEM, endpoint protection, and firewall systems.
• Investigate and document security events.
• Support business continuity and disaster recovery efforts.
• Conduct vulnerability scans on servers and networks.
• Lead incident response efforts.
• Assess risks of third-party vendors and cloud solutions.
• Enforce IT security policies and standards.
• Provide ongoing security training to City employees.

Skills

Knowledge of SIEM tools

Vulnerability management

Incident response

Understanding of networking concepts

Firewalls

Cloud security

Education

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science

Tools

CompTIA Security+

Certified Information Systems Security Professional (CISSP)

Certified Ethical Hacker (CEH)

Job description

Position Overview

The IT Security Specialist is responsible for safeguarding the City’s information systems, networks, and data. This role is a versatile position that combines aspects of monitoring, incident response, compliance, and security engineering. The specialist works closely with Infrastructure, Applications, and Support Services teams to ensure the confidentiality, integrity, and availability of information technology resources, while also supporting user awareness and compliance initiatives.

Key Responsibilities

• Monitor the City’s SIEM, endpoint protection, and firewall systems for suspicious activity.
• Investigate and document security events, escalating incidents in accordance with the City’s Incident Response Plan.
• Support business continuity and disaster recovery efforts, ensuring essential City services remain operational.
• Conduct vulnerability scans on City servers, networks, and applications.
• Lead/participate in incident response efforts, including containment, eradication, recovery, and post-incident reporting.
• Track, prioritize, and remediate vulnerabilities in collaboration with Infrastructure Services and Enterprise Applications teams.
• Assess risks associated with third-party vendors, cloud solutions (e.g., Workday, Tyler, Accela), and payment processing systems.
• Contribute to drafting, reviewing, and enforcing the City’s IT security policies and standards, including acceptable use policies, review of least privilege policies, and data protection standards.
• Assist with preparation for audits, council reporting, and grant compliance related to cybersecurity.
• Ensure systems meet compliance with standards such as NIST, CJIS, PCI-DSS, and organizational policies.
• Conduct regular vulnerability scans, risk assessments, and penetration testing.
• Assist in policy development for information security, acceptable use, and data protection.
• Provide ongoing security training to City employees, including phishing awareness and safe technology practices.
• Develop and distribute communication on emerging threats and citywide security reminders.
• Assist in the configuration and monitoring of firewalls, VPNs, and intrusion prevention systems.
• Review logs for unauthorized access attempts or anomalies.
• Partner with the Infrastructure and Support Services divisions to ensure secure configuration of desktops, mobile devices, and enterprise applications.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent combination of education and experience).
• 2 years of experience in IT security, system/network administration.

Technical Skills

• Knowledge of SIEM tools, vulnerability management, and incident response.
• Familiarity with municipal applications (ERP, utility billing, municipal court, GIS, etc.).
• Understanding of networking concepts, firewalls, and cloud security.

Certifications (Desired)

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)

Competencies

• Strong analytical and problem-solving skills with attention to detail.
• Effective written and verbal communication for both technical staff and non-technical audiences (including Council and Department Heads).
• High ethical standards and commitment to confidentiality of sensitive government data.

Equal Opportunity Employer

The City of Galveston is an equal opportunity employer and will consider only the qualifications of the applicants. The City does not tolerate any form of discrimination based on race, color, religion, sex, age, national origin, or physical/mental disability in employment or provision services.