Cybersecurity Analyst (Enterprise Supervising Technology Analyst)

$141,698 - $172,645/Yr

City San Jose - San Jose, CA

Full-time - Mid Level

Remote - San Jose, CA

5,001-10,000 employees

Executive, Legislative, and Other General Government Support

About the position

The City of San José is seeking a Cybersecurity Analyst (Enterprise Supervising Technology Analyst) to join its Information Technology Department (ITD). This position plays a crucial role in supporting new and existing initiatives within the Cybersecurity Office, focusing on Risk Mitigation and Identity & Access Management. The Cybersecurity Analyst will be responsible for implementing and managing information and system security programs across the City, ensuring that municipal services remain secure and resilient. This role is essential in administering risk identification, protection, compliance, threat detection, incident response, and recovery services for all City departments, thereby contributing to business resilience. The ideal candidate will thrive in one of the largest and most innovative communities in the nation, working under the guidance of the City Information Security Officer (CISO). The Cybersecurity Analyst will be expected to adapt quickly to emerging challenges, applying their expertise in all aspects of security, interfacing with vendors, managing security projects, and providing security services to City departments with strong outcomes. The position requires a proactive approach to building and maintaining a robust Identity and Access Management program, which includes auditing, reporting, role-based access control, single sign-on, federation, identity lifecycle management, privileged identity management, provisioning, compliance, and policy management. In addition to managing security-related projects from inception to completion, the Cybersecurity Analyst will build and manage a strong vulnerability management program, ensuring that vulnerabilities are assessed and mitigated effectively. The role also involves maintaining an IT asset management program, identifying and mitigating threats, and working collaboratively with other teams to prepare for, detect, eradicate, and restore operations in the event of security incidents. The Cybersecurity Analyst will interface with the Virtual Security Operations Center (V-SOC) to ensure that system and network monitoring is conducted in accordance with defined service levels and established standards. This position is eligible for a hybrid telework schedule, allowing for flexibility in working arrangements.

Responsibilities

• Support new and existing initiatives in the Cybersecurity Office focusing on Risk Mitigation and Identity & Access Management.
• Implement and manage information and system security programs across the City.
• Administer risk identification, protection, compliance, threat detection, incident response, and recovery services for all City departments.
• Build and maintain a robust Identity and Access Management program including auditing, reporting, role-based access control, and compliance.
• Define, plan, and execute security-related projects from beginning to end.
• Manage vendors to execute tasks on demand or as part of a project.
• Build and manage a strong vulnerability management program, assessing vulnerabilities and identifying weaknesses.
• Maintain an IT asset management program, including software, hardware, and logical inventory of systems.
• Identify and mitigate threats utilizing existing technologies, tracking and reporting mitigation efforts.
• Work with teams to prepare, detect, eradicate, and restore operations in the event of incidents.
• Interface with the Virtual Security Operations Center (V-SOC) to ensure system and network monitoring is conducted effectively.

Requirements

• A Bachelor's Degree from an accredited college or university in a relevant field.
• Four (4) years of progressively responsible professional/journey level experience, including at least two (2) years of lead technical work in development, implementation, and maintenance of electronic business systems/solutions or application development and/or support.
• Possession of a valid State of California driver's license may be required.
• Certification as a Microsoft Certified Systems Engineer (MCSE) or equivalent certification may be required.
• Passing a San Jose Police Department (SJPD) background check is a condition of employment.

Nice-to-haves

• Possession of a current (non-expired) Certified Information Systems Security Professional (CISSP) or equivalent certification is highly desirable.
• Experience in security architecture is a plus.
• 5+ years in a Vulnerability Management Plan is a plus.

Benefits

• Salary range of $141,697.92 - $172,645.20 annually, with an additional 5% ongoing non-pensionable compensation pay.
• Flexible/Hybrid work schedule.
• Comprehensive health insurance coverage.
• Retirement savings plan options.
• Paid holidays and vacation time.
• Professional development opportunities.