Cyber Security Engineer

Overview

The Cybersecurity Engineer is responsible for supporting the protection and security of critical systems and data related to the City’s technology infrastructure, business systems, and water management and distribution environments. The position works closely with Information Technology teams, City leadership, water and wastewater engineers, and other stakeholders to advise on, coordinate, and support the implementation of cybersecurity measures, monitor systems for vulnerabilities, and assist in incident response activities to help ensure the confidentiality, integrity and availability of City systems, data, and municipal water infrastructure.

The Cybersecurity Engineer supports the delivery of organizational goals by implementing and maintaining the Information Security and Compliance programs. This role ensures compliance targets are met by delivering secure technology services aligned with regulatory requirements, organizational risk appetite, established risk management practices, and evolving business needs.

The Cybersecurity Engineer collaborates closely with City leadership, Information Technology teams, and business stakeholders to share information, assess risk and identify, evaluate, and implement solutions that support cybersecurity and compliance objectives.

Reports to: Director of Information Technology

Direct Reports: None

The description below is intended to represent only the key areas of responsibilities; specific job assignments, duties, and environmental conditions will vary depending on the business need of the department and the organization.

• Communicates complex information, concepts, and metrics in a confident and well-organized manner through verbal, written, and visual means, and tailored to the audience including to multiple levels of leadership.
• Collaborates with Information Technology and business teams, as well as other internal/external partners to build relationships supporting cybersecurity, compliance, and digital accessibility initiatives.
• Regularly presents to the City Leadership Team on the state of cybersecurity to promote an understanding cybersecurity needs and ensure leadership support for investments related to the security of enterprise systems.
• Partners with city wastewater and water distribution leaders to ensure compliance with appropriate water infrastructure security standards and regulatory requirements.
• Develops cybersecurity awareness and training initiatives for users across the organization.
• Serves as the strategic liaison between IT divisions, Leadership, and end users to foster a strong culture of cybersecurity awareness to stay abreast of changing needs in the organization and ensure cybersecurity initiatives and procedures evolve with the organization.

• Develops long term strategies and programs for meeting future cybersecurity needs.
• Leads special projects teams and provides direction to technical staff on Cybersecurity projects and training programs.
• Conducts risk assessments by staying informed about emerging cybersecurity threats and technologies, gathering customer feedback, and analyzing needs to identify solutions to develop robust cybersecurity programs across the enterprise platform and assists with vendor selection recommendations.
• Designs and implements new cybersecurity systems, and software applications to meet changing cybersecurity needs in collaboration with other IT professionals and departments.
• Designs, analyzes, installs, and maintains cybersecurity tools and systems.

• Stays updated on the latest security threats, technologies, and industry trends, and provides recommendations for improving security posture.
• Using specialized tools and techniques, monitors the city’s network, servers, operating systems, and applications to detect and prevent cybersecurity threats and malicious activity.
• Collaborates with business units to complete security surveys and facilitates network scans to maintain compliance with security standards.
• Assists with regulatory compliance and risk assessments to identify and mitigate compliance…