Technology Engineer – Senior Security Specialty - Citywide; C00096

Job Overview

Under general direction, the Senior Technology Engineer analyzes, plans, designs, implements, maintains, troubleshoots, and enhances technology systems or platforms. The incumbent serves as the senior technical contributor, delivering highly specialized performance, exercising discretion over technical issues, and making recommendations in line with city directives, policies, standards, and regulations.

• Architect, design, implement, maintain and operate information system security and privacy controls and countermeasures.
• Analyze and recommend security and privacy controls and procedures for acquisition, development, and change management life cycles of information systems, and monitor for compliance.
• Analyze and recommend security and privacy controls for business processes related to the use of information systems and assets, and monitor for compliance.
• Monitor information systems for security incidents, vulnerabilities and privacy risks; develop monitoring and visibility capabilities; report on incidents, vulnerabilities and trends.
• Respond to information system security and privacy incidents, including investigation, countermeasures, and recovery from computer‑based attacks, unauthorized access and policy breaches; coordinate with third‑party incident responders, including law enforcement.
• Administer authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets.
• Analyze trends, news and changes in threat, compliance and privacy regulatory environment with respect to organizational risk; advise organization management and develop and execute plans for compliance and risk mitigation; perform risk and compliance self‑assessments and coordinate third‑party risk and compliance assessments.
• Analyze and develop information security and privacy governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security, privacy, and use and operation of information systems.
• Develop and administer, or provide advice, evaluation and oversight for, information security and privacy training and awareness programs.
• Perform additional duties as assigned.

Education
:
An associate degree in computer science, computer engineering, information systems, or a closely related field from an accredited college or university. Equivalent credit and course requirements may be substituted.

Experience
:
Three (3) years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of a system or platform.

Substitution
:
One year of additional experience may be substituted for the required degree. Completion of the 1010 Information Systems Trainee Program may also be substituted for the required degree.

All job applications for the City and County of San Francisco must be submitted through our online portal. The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, HIV/AIDS status, genetic information, marital status, sexual orientation, gender expression, military and veteran status, or any other protected category under the law.