Vulnerability Analyst -Level II; IT Systems Specialist - Department - Temporary

Position: Vulnerability Analyst -Level II (IT Systems Specialist) - ITS Department - Temporary Full Time
ABOUT THIS POSITION

The City of Phoenix, Information Technology Services Department (ITS) provides enterprise-wide IT and supports departments' business solutions. Our business is in the City of Phoenix, which means the work our IT professionals do helps to improve lives of residents, businesses, and visitors to Phoenix!

The ITS department is seeking Vulnerability Analysts level II (ITSS) to join the Vulnerability Management Team within the Information Security Operations and Intelligence Division. Vulnerability Analysts level II (ITSS) serve as a proactive defense strategists safeguarding the City's digital infrastructure

The Vulnerability Analyst role is responsible for identifying, analyzing, and helping to remediate vulnerabilities in the organization's systems, networks, and applications. This role involves proactive scanning, threat assessments, risk prioritization, and collaboration with IT and development teams to ensure a strong security posture.

Key duties and responsibilities include, but are not limited to:

* Perform regular vulnerability assessments using tools such as Tenable Nessus, Qualys, Rapid7, or similar.

* Analyze scan results, validate findings, and determine risk levels.

* Track and report vulnerabilities, recommending remediation steps based on risk severity.

* Collaborate with IT, Dev Ops, and system owners to remediate vulnerabilities.

* Maintain and update vulnerability scanning tools and systems.

* Monitor threat intelligence feeds to stay ahead of emerging vulnerabilities and exploits.

* Develop metrics and dashboards to communicate vulnerability trends and compliance status.

* Ensure all vulnerability management processes align with compliance requirements (e.g., ISO 27001, NIST, PCI-DSS).

* Document processes, findings, and remediation efforts in a clear and auditable manner.

* Participate in incident response activities if a vulnerability is exploited.

Please note:

This is a remote position which is eligible to telework up to five days a week, at department discretion and requires the ability to attend meetings and trainings in-person at a designated City work location when required, based on operational needs. This position requires participation in cyber emergency incidents.

This position will be funded through June 2027 with a possibility to be made regular in a future budget cycle. The temporary position will have benefits but will not earn city retirement credits or participate financially into the city's retirement program. If the successful candidate is a current City employee, all benefits will still be applicable, and the employee will still contribute to their pension.

Temporary positions are not covered under civil service rules, and thus employment is considered "at-will", and employees may be separated at any time.

IDEAL CANDIDATE

* Detail-oriented with a strong sense of accountability.

* Comfortable working in a fast-paced, high-security environment.

* Excellent written and verbal communication and presentation skills.

* Knowledge of:

* Cloud environments (AWS, Azure, GCP) and related vulnerabilities.

* Threat intelligence concepts and emerging vulnerability trends.

* Ability to:

* Communicate tactfully, verbally and in writing, with department heads, managers, coworkers and vendors to resolve problems, and negotiate resolutions.

* Work independently and as part of a team.

SALARY

Pay Range: $84,468.80 to $ annually.

Hiring Range: $84,468.80 to $ annually.

Pay Range Explanation:

* Pay range is the entire compensation range for the position classification.

* Hiring range is an estimate of where you can receive an offer. The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, education, licenses, training, and internal equity.

Internal Only:
Please understand that this is pay grade 063. If selected, your salary offer will be based on the applicable promotion or demotion worksheet in accordance with the City Pay Ordinance.

* Promotions occur when the last two digits of the pay grade increase.

* Demotions occur when the last two digits of the pay grade decrease.

* Lateral transfers occur when there is no change to the last two digits of the pay grade.

* When there is a change in the first digit of the pay grade, there may also be a change to your classification or unit.

Your job classification can be found in eCHRIS  Personal Details under your name, located in the top left section of the page.

The pay grade and classification/unit of your current position may be found by looking up your job title on the job description page.

BENEFITS

A comprehensive benefits package is offered which includes:

* Traditional pension with employer and employee contributions,  for more details:
Pension Information

* 401(a) and 457 plans with employer contributions

* Choice of generous medical HMO, PPO, or HSA/HDHP plans

* Medical enrollment includes a monthly $150 City contribution to a Post-Employment Health Plan

* Wellness incentive of up to $720 annually

*…