Address
Form of workCurrent: $113,736 - $152,436
Effective July 2024: $117,168 - $157,008 annually
Under general supervision, performs duties related to threat detection and prevention, vulnerability management, security education, incident response and similar duties as required. Provides professional, technical, and analytical work in the Information Technology services.
CLASS CHARACTERISTICS:
An incumbent in this classification is expected to carry out general administrative assignments with only minimal supervision and refers to supervisory personnel those matters which involve policy and procedure decisions, technical questions, deviations from standard practice and unusual Cyber Security problems. Work is performed under the direction of the IT Manager and is evaluated through conferences, reports and the quality of services provided.
APPLICATION AND SELECTION PROCESS:
Candidates are required to provide specific information regarding their education and experience as it relates to the position by completing all fields of the application. Applications may be rejected if incomplete. Based upon the information presented on the application, a limited number of candidates who possess qualifications most pertinent to the position will be invited to participate in the selection process. The selection process may include, but is not limited to the following components: application review and evaluation, written examination or exercise, physical examination, practical exercise and interview evaluation. Please notify the Human Resources Division 72 hours in advance of the test date if you have a disability which requires accommodation for the testing process. The eligibility list will be in effect for one (1) year, unless exhausted sooner. The eligibility list established from this recruitment may be utilized to fill lower-level vacancies which occur during the life of the list.
It is recommended you use a personal email address on your application instead of a work email address. Notifications during this recruitment will be sent by email only (regardless of the notification preference selected during the online application process). Notifications will be sent to the email address that is listed on your online application.
All employment offers made by the City are contingent upon establishing proof of a prospective candidate's legal authorization to work in the United States and successfully passing all components of the pre-employment process which includes a comprehensive background investigation facilitated by the Costa Mesa Police Department that includes, but is not limited to, a criminal history check (Live Scan fingerprint check) and a polygraph examination. Please refer to supplemental questions 9-25 for more information.
Note: The provisions of this job bulletin do not constitute an expressed or implied contract. Any provisions contained within may be modified or revoked without notice.
These functions may not be present in all positions in this class. When a position is to be filled, the essential functions will be noted in the announcement of position availability. Management reserves the right to add, modify, change or rescind work assignments as needed.
Evaluates, recommends, implements, and monitors security measures and programs in accordance with organization policies, procedures and standards.
Trains and educates staff and users on information security protocols, policies, and procedures.
Supports computer users with security related software installations, implementation of new security products and procedures, and troubleshooting of existing security solutions.
Manages incident response, business continuity procedures and recovery plan from information security privacy standards; recommends mitigation of non-compliant environments.
Oversees the development and maintenance of the City's firewalls and security programs.
Defines and verifies backup, recovery and security procedures for critical business systems. Audits business systems.
Researches, analyzes and interprets State and Federal legislation and regulations in information security and recommends security enhancements.
Researches contract service and supply needs; prepares requests for proposals; develops and negotiates contract terms; monitors contract compliance and mediates user/provider complaints.
Assists in developing strategic plans for information, security and applications development.
Establishes and maintains cohesive working relationships with public officials, vendors, supervisors, executives, and City staff.
Attends meetings, workshops and conferences in order to stay abreast of current trends and developments in the Cyber Security field.
May need to work evenings, weekends and holidays in the event of a breach or emergency.
Performs other related work as required.
A typical way to obtain the requisite knowledge and abilities to perform the duties and responsibilities of this classification is as follows:
EDUCATION, TRAINING AND/OR EXPERIENCE:
An Associate's Degree in Computer Science, Information Technology, MIS, Data Science, Information Security or related field.
Four years of experience in Cloud Security, including experience in managing large cybersecurity/information technology projects and/or managing and maintaining large, complex security systems involving the physical, data, network, transport, session, presentation layers of the OSI model.
An equivalent combination of education and relevant experience that provides the desired knowledge, skills and abilities to successfully perform essential functions may also be considered.
LICENSE AND/OR CERTIFICATE:
Class C California Driver's License. Revocation of license during employment may result in disciplinary action or reassignment.
The following certificates are highly desirable: Certified Information Systems Security Professional (CISSP), CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Certified Information Security Manager (CISM)®, GIAC Security Essentials Certification (GSEC), Certified Ethical Hacker (CEH)®, Cisco Security.
REQUISITE KNOWLEDGE AND SKILL LEVELS:
Knowledge of principles and practices of Cyber Security, digital access control, and intrusion detection and prevention.
Knowledge of operational characteristics of computer networks, servers, VPN, end point protection, penetration testing, scan testing and systems administration.
Knowledge of Cyber Security vulnerability testing and risk analysis.
Knowledge of methods and techniques for managing and mitigating Cyber Security risks and threats.
Knowledge of principles and practices of Cyber Security audits and audit documentation.
Knowledge of statistical measurements and recordkeeping methods and techniques.
Knowledge of information security frameworks such as the NIST Cybersecurity Framework, NIST, ISO, etc.
Skill in Microsoft Office Suite.
Skill in oral and written communication.
REQUISITE ABILITIES:
Ability to meet critical deadlines; make decisions under pressure.
Ability to communicate effectively both orally and in writing and prepare and present written and oral information in a clear, concise and accurate manner.
Ability to gather and evaluate information in order to reason logically, draw valid conclusions, take appropriate actions and/or make appropriate recommendations.
Ability to interpret rules and regulations, laws and policies and apply them in a variety of procedural situations.
Ability to establish and maintain effective working relationships with staff, City officials, representatives of other governmental agencies and the general public.
PUBLIC EMPLOYEE DISASTER SERVICE WORKER:
In accordance with Government Code Section 3100 - all City of Costa Mesa employees are required to perform assigned disaster service worker duties in the event of an emergency or a disaster.
PHYSICAL TASKS AND ENVIRONMENTAL CONDITIONS:
Please contact Human Resources for a summary of the essential tasks and environmental factors for this classification.
Employee accommodations for physical or mental disabilities will be considered on a case-by-case basis.
Employment Type: FULL-TIME
