Cybersecurity Engineer

Salary: $65,839.90 - $107,934.32 Annually
Location : Burlington, VT
Job Type: Regular Full Time Exempt
Job Number: 4091-36-001
Department: Burlington Electric
Opening Date: 01/18/2024
Closing Date: 1/31/2024 11:59 PM Eastern
FLSA: Exempt
Bargaining Unit: IBEW
General Purpose
This position is responsible for implementing, supporting, and managing Burlington Electric Department's cybersecurity initiatives and policies. Responsibilities include design and review of security controls, monitoring of internal/external access controls, and implementing security safeguards to protect the confidentiality, integrity, and availability of information technology (IT) and operational technology (OT) assets. This role will be focused on protecting system boundaries; keeping computer systems, applications and network devices hardened against attacks; as well as monitoring and responding to significant security events ensuring the stability, integrity, and secure operation of critical in-house and cloud-based systems and networks.
Union Affiliation: International Brotherhood of Electrical Workers (IBEW)
Pay Grade A4: $65,839.90 - $107,934.32 Annually
Essential Job Functions

• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organization's data, systems, networks, and security tools (IDS, IPS, Firewall, VPN, IDP, WAF, DLP, SIEM, Web Proxies, and Vulnerability Scanners) for the advanced metering infrastructure (AMI), supervisory control and data acquisition (SCADA)/advanced distribution system (ADMS), DMZ, and business computing environments.
• Work closely and collaborates with the Security Operations Center team to analyze, investigate, and respond to security incidents, sharing expertise and insights to enhance the organization's cyber defense strategy.
• Lead the design and deployment of group policy to harden endpoints and infrastructure.
• Provide consultation to the IT and OT teams in preparation and implementation of patch management and firmware management.
• Support other IT staff in managing backup infrastructure, including testing and preparation of disaster recovery plans and policies.
• Detect, investigate, and perform recovery from security incidents, and assist with incident response plans.
• Conduct threat and vulnerability risk assessments to determine security requirements and proactively fix security flaws and vulnerabilities.
• Conduct analysis of security requirements and controls to identify gaps and provide recommendations of industry best practices, trends, and technology products.
• Support the development of and adherence to policies, standards, and procedures for data
  governance and data management.
• Assist in the identification, evaluation, deployment, and optimization of security technologies.
• Design and present annual cybersecurity training to BED staff members.
• Lead BED's Cybersecurity Working Group
• Work closely with other BED teams including IT/Systems, Engineering, System Operations, Generation, and Finance to ensure adequate security solutions are in place for all IT and OT systems and platforms to sufficiently mitigate identified risks and meet business objectives.
• Ensure that the organization's data and infrastructure are protected by enabling the appropriate security controls.
• Provide security design, consultancy, and assessment services and introduce improvements in technical security standards and security implementation patterns and designs.
• Maintain awareness of latest security risks, analyze potential impact of new threats and exploits, and communicate risks to relevant business units.
• Create reports on security incidents and overall enterprise security status.
• Develop security-related procedures and related metrics; review and contribute to the improvement and standardization of security systems across all IT and OT.
• Create and implement cybersecurity best practices in accordance with BED's access control, disaster recovery, business continuity, and risk management policies, plans, and procedures.
• Perform daily administrative tasks, reporting, and communication with relevant departments in the organization.
• Collaborate as a member of the IT team sharing information, mentoring, cross-training, and providing coverage as directed by the supervisor.

Non-Essential Functions:

• Perform other duties as required.

Qualifications/Basic Job Requirements

• Ability to actively support City diversity, equity, and cultural competency efforts within stated job responsibilities and work effectively across diverse cultures and constituencies.
• Demonstrated commitment to diversity, equity and inclusion as evidenced by ongoing training and professional development.

• Bachelor of Science degree in Computer Science, IT, or related field with 3 years of experience in an information technology role responsible for servers and networks, including 2 years of experience implementing cybersecurity best practices and initiatives, incident detection, incident response.

• Additional experience may be substituted for a degree requirement on a two-for-one-year basis.

• Direct experience with Firewalls (functionality and maintenance), Office 365 Security, VMWare security, and Endpoint Security required.
• Direct experience securing and managing Windows server operating systems and Microsoft Active Directory domains required.
• Direct experience securing and managing Linux server operating systems, i.e., Red Hat Enterprise Linux (RHEL), Debian, or Ubuntu required.
• Experience with setup, configuration, and maintenance of IPV4/IPV6, DHCP, DNS, RADIUS, VPN, 802.11, VoIP, VLANs, SSL, MFA using best security practices required.

• Familiarity with setup, configuration, and maintenance of switches, routers, firewalls, and wireless technology, i.e., Cisco, HP/Aruba, Dell, RuggedCom, FortiGate preferred.

• Direct experience with scripting, i.e., batch files, Python, and PowerShell required.
• Familiarity with security-related aspects of database systems, i.e., Oracle, MS SQL, MySQL, PostgreSQL preferred.
• Familiarity with network, server, storage virtualization, i.e., MDS switching infrastructure, VSAN, VRF, VPN, and VMWare vSphere required.
• Must possess excellent oral, written, and analytical skills.
• Ability to provide technical presentations and training as needed.
• Ability to establish and maintain positive working relationships with co-workers, customers, and other personnel.
• Ability to work effectively in a team-oriented, collaborative environment.
• Ability to multi-task, work under minimal supervision, and adapt quickly to changing priorities and deadlines.
• Ability to travel to and from various sites within the City of Burlington.
• Ability to work beyond the normal forty (40)-hour work week as needed consistent with provisions of the BED/IBEW Collective Bargaining Agreement.

• Regular attendance is necessary and is essential to meeting the expectations of the job functions.
• Ability to understand and comply with City standards, safety rules and personnel policies.

Additional Information
Promoting a culture that reveres diversity and equity
The City of Burlington is proud to be an equal opportunity employer, and we are strongly committed to creating a dynamic and equitable work-force that mirrors the population and world that we serve. We do not discriminate on the basis of political or religious affiliation, race, color, national origin, place of birth, ancestry, age, sex, sexual orientation, gender identity, marital status, crime victim status, veteran status, disability, HIV positive status, or genetic information in employment or the provision of services.
In addition to being an equal opportunity employer we actively encourage applicants who can contribute to our growing diversity to apply.
Applications for our employment opportunities are only accepted online through our website.
For accessibility information or alternative formats, please contact Human Resources Department at or .
The City of Burlington is proud to offer full time employees a comprehensive benefits program that includes:

• Medical/Dental Insurance Coverage
• Prescription Drug Coverage
• Flexible Spending Programs
• Short-Term Disability Insurance
• Paid Leave (Sick and Vacation)
• Pension Plan
• Contributory Retirement Plan
• Life Insurance
• Discounted Gym Memberships
• Free Yoga Membership to Sangha Studios (Burlington, Williston & online)
• Tuition Discounts for Champlain College TruEd
• Employee Assistance Program
• Working Bridges Program
• Wellness Bonus Incentives Program
• Local & National Store Discounts
• Subsidized Transportation Options
• Qualifying employer for Public Service Loan Forgiveness

For additional details please visit
01
Do you have a Bachelor's Degree in Computer Science, IT, or a related field with three (3) years experience in an information technology role responsible for servers and networks, including two (2) years of experience implementing cybersecurity best practices and initiatives, incident detection, and incident response? Additional experience may be substituted for a degree requirement on a two-for-one year basis.

• Yes
• No

02
Do you have direct experience with Firewalls (functionality and maintenance), Office 365 Security, VMWare security, and Endpoint security?

• Yes
• No

03
Do you have direct experience securing and managing Windows server operating systems and Microsoft Active Directory domains?

• Yes
• No

04
Do you have direct experience securing and managing Linux server operating systems, i.e., Red Hat Enterprise Linux (RHEL), Debian, or Ubuntu?

• Yes
• No

05
Do you have experience with setup, configuration, and maintenance of IPV4/IPV6, DHCP, DNS, RADIUS, VPN, 802.11, VoIP, VLANs, SSL, and MFA using best security practices?

• Yes
• No

06
Do you have direct experience with scripting, i.e., batch files, Python, and PowerShell?

• Yes
• No

07
Are you familiar with network, server, storage virtualization, i.e., MDS switching infrastructure, VSAN, VRF, VPN, and VMWare vSphere?

• Yes
• No

Required Question