Systems Security Analyst II​/Sr

Systems Security Analyst II/Sr )

The City of Lincoln is hiring a Systems Security Analyst II/Sr. in the Information Technology Department.

The Systems Security Analyst performs a variety of professional level work, including the design, implementation, evaluation, and daily management of security systems and solutions; and performs duties related to threat detection and prevention, education, risk assessment, compliance, governance, business recovery, forensics, and incident response.

• Systems Security Analyst II: $6,887.72 - $9,230.21
• Senior Systems Security Analyst: $7,232.09 - $9,691.69

Systems Security Analyst II is the journey level in the Systems Security Analyst class series and is responsible for the full range of duties. This class is distinguished from the next higher classification of Senior Systems Security Analyst in that the latter is an advanced journey level and performs more complex assignments and may have lead responsibilities. Employees at this level receive only occasional instruction or assistance as new, unusual or unique situations arise and are fully aware of the operating procedures and policies within the work unit.

Positions in this class are flexibly staffed and are normally filled by advancement from the Systems Security Analyst I.

Senior Systems Security Analyst is the advanced journey level in the Systems Security Analyst class series. Incumbents are the recognized experts in their field, including possessing extensive experience designing and architecting complex information technology and security solutions, as well as demonstrating successful technical project management by the advanced level of knowledge and experience required. Positions at this level are distinguished from other classes within the series by the provision of the highest level of technical expertise and knowledge in the performance of duties.

Systems Security Analyst II receives supervision from the Chief Innovation and Technology Officer. Incumbents of this class do not routinely exercise supervision.

Senior Systems Security Analyst receives general direction from the Chief Innovation and Technology Officer. Exercises technical and functional supervision over professional and technical personnel for assigned projects.

• Architect, implement, monitor, maintain, and troubleshoot various security systems that protect the City’s networks, IT/OT systems (including SCADA), applications and critical infrastructure.
• Design, organize, modify, install, secure and support security infrastructure; and provide technical support for network and security issues associated with enterprise applications.
• Analyze both raw and processed security alerts, logs and event data to identify potential security incidents, threats, mitigations, and vulnerabilities.
• Architect, implement, maintain, and troubleshoot the City’s business continuity plan and emergency response plan as it relates to redundant, secure infrastructure.
• Investigate, analyze, produce reports, and remediate security incidents that occur on City systems and applications, both on‑premises as well as in the cloud.
• Confirm viable backups, test, maintain and monitor both on‑premises and within the cloud.
• Review Cyber Security threat information and assist with mitigating vulnerabilities identified.
• Conduct a variety of Cyber Security policy compliance tasks such as discovering unauthorized devices, conducting site surveys for non‑compliance, and ensuring network access requirements are met.
• Perform risk assessments and execute tests of network, backups and information systems to ensure technology processes are secure.
• Facilitate administrator and end‑user cyber security training and security awareness programs; track and report on end‑user training compliance.
• Facilitate penetration testing of all City systems and infrastructure.
• Ensure systems and procedures are compliant with relevant industry requirements and government regulations (e.g., PCI‑DSS, CJIS, NIST, NERC CIP, ISO 27000, etc.).
• Engage in continuous information security training to maintain awareness of changes within the information security…