Cyber Defense Operations Engineer - Department of Technology

Cyber Defense Operations Engineer - Department of Technology (1042)

Apply using Smart Recruiters, the City and County of San Francisco's application portal.

Are you ready to make an impact in one of the most innovative cities? The Department of Technology (DT) is looking for passionate IT professionals to help shape the future of technology in San Francisco! As the centralized technology services provider for the City and County of San Francisco (CCSF), DT delivers critical infrastructure and services to over 33,000 employees—supporting public safety, municipal broadband, cybersecurity, cloud solutions, and more!

With a $140M+ annual budget and a team of 300+ experts, DT is leading the charge in digital transformation. DT provides services through our core areas of IT Excellence:

• IT Project Management Office
• Cloud Center of Excellence
• IT Operations and Support including the Service Desk and NOC
• City Infrastructure including the Network, Telcom and Data Centers
• Office of Cybersecurity including Cyber Defense, Identity Management and Disaster Recovery
• Public Safety Systems and Municipal Broadband Fiber
• SFGovTV Broadcasting Services
• IT Finance and Administration Services
• Emerging Technologies

Why Join Us? Innovative & Impactful Work At DT, you won’t just work on IT—you’ll power a city. Your expertise will directly impact the residents of San Francisco, from closing the digital divide to ensuring secure, efficient city operations.

Benefits of Working for CCSF
:
In addition to challenging and rewarding work, the City provides a generous suite of benefits to its employees.

• Competitive pay, benefits, and retirement options
• Career growth opportunities through training, internal mobility, and subsidized education
• Diverse work environment in a diverse city
• The Department has a hybrid work schedule

Join the team that’s shaping the future of technology in San Francisco. Apply today and be part of a dynamic, innovative, and mission-driven IT team!

The Cyber Defense Infrastructure Enhancement project is a multi-year initiative designed to modernize and strengthen the City and County of San Francisco’s (CCSF) cybersecurity posture. This project involves replacing outdated monitoring tools with advanced technologies and deploying cyber defense capabilities across both CCSF-connected networks and independently managed environments. These efforts are vital to maintaining real-time visibility, securing sensitive data, and supporting uninterrupted service delivery across city departments.

The Cyber Defense Operations Engineer is critical to protecting the integrity and availability of CCSF's Cyber Defense Operations infrastructure and the data environments that support essential citywide services. The selected candidate will be responsible for proactively monitoring security systems, identifying potential threats, and assisting in the investigation and resolution of security incidents.

The ideal candidate will bring a strong background in IT security, demonstrate hands‑on experience with cybersecurity tools and platforms, and be capable of working effectively in a fast‑paced environment with minimal supervision. Their expertise will be instrumental in supporting the successful execution of this project and advancing CCSF’s

The Cyber Defense Operations Engineer will perform technical and analytical tasks that contribute to both daily security operations and long‑term strategic goals. The role focuses on assisting with incident response, root cause analysis, vulnerability assessments, security audits, tool support, and threat hunting. It also involves maintaining documentation, tracking key metrics, and contributing to continuous improvement efforts. The position requires collaboration with senior engineers and cross‑functional teams, and includes an expectation of ongoing professional development in cybersecurity best practices.

Essential duties include, but are not limited to, the following:

• Assist in Root Cause Analysis: Collaborate with senior team members to identify the underlying causes of security incidents and contribute to continuous improvement efforts to prevent recurrence.
• Conduct Routine Security Audits: Support regular…