SENIOR SECURITY ENGINEER

SENIOR SECURITY ENGINEER

Job Number: 398681-1

Department of Technology and Innovation

Number of Positions: 1 (Additional vacancies possible pending budget approval)

Starting Salary: $127,584.00

Applications for this position will be accepted until 11:59pm CDT on 09/27/2024

The City of Chicago's Department of Technology and Innovation is seeking a Senior Security Engineer, with a focus area on Threat Management, to join the City's Information Security Office team. The successful candidate will join the Cybersecurity Operations function on the Information Security Office team helping deliver threat intelligence and threat hunt capabilities.

Under supervision, this is the advanced level in the class series responsible for executing the security strategy and implementing and maintaining complex security measures for the protection of computer systems, networks, and information, in accordance with security policies and guidelines, and performs related duties as required.

This class is assigned to the Engineer Information Technology Job Family which consists of engineers and developers that design, build, test, deploy, and support IT products and solutions.

ESSENTIAL DUTIES

1. Creates controls to detect potential security violations and makes recommendations to improve security.
2. Designs and implements security solutions for detection and notification, security auditing, alerting, and response, vulnerability detection and remediation.
3. Reviews security information system schematics, diagrams, and other program documentation to assist with development and preparation of cost estimates.
4. Performs capacity and future growth planning of the enterprise security infrastructure to ensure a highly available security environment.
5. Verifies security systems by developing and implementing test scripts and running security scans.
6. Maintains and supports information security tools such as antivirus, end-point detection and response, Data Loss Prevention, vulnerability scanning tools and other security controls which safeguard and monitor events.
7. Certifies the security functionality of components and services.
8. Provides expertise and assistance to ensure the infrastructure and information assets are protected.
9. Validates baseline security configurations for operating systems, applications, networking, and telecommunications equipment.
10. Participates in 24/7 on-call rotation, Incident Response and Disaster Recovery efforts.
11. Maximizes security footprint by monitoring security tools, troubleshooting escalated security problems and incidents, identifying security gaps, and evaluating and implementing enhancements.
12. Provides responsive support for security problems found during normal working hours and outside normal working hours.
13. Resolves and consults on the most complex security issues and keeps customers informed about security problems and resolutions.
14. Analyzes reports and historical data to identify security problems and troubleshoots, diagnoses, and resolves security problems.
15. Communicates status and documents problems and resolutions for future reference.
16. Assists in the development of incident response, continuity and disaster recovery plans with department stakeholders and third-party service providers.
17. Evaluates vendor solutions to ensure compliance with requirements and cost-effectiveness, working with vendors to resolve security problems and develop solutions, evaluating services provided and recommending changes.
18. Develops and maintains enterprise IT standards across the security footprint.
19. Tracks, monitors, and analyzes key cybersecurity metrics and KPIs.
20. Recommends security products by researching needs and evaluating corporate standards list and security training programs targeting specific areas of improvement.
21. Managing and mentoring team members.

Additional duties may be required for this position.

Location: 2 N. LaSalle St., Chicago, IL

Days: Monday-Friday

Hours: 8:30am-4:30pm

THIS POSITION IS EXEMPT FROM THE CAREER SERVICE

MINIMUM QUALIFICATIONS

Graduation from an accredited college or university with a Bachelor's in Computer Science, Information Systems, Cybersecurity or a directly related field, plus four (4) years of work experience in IT and security work, system analysis, application development, systems administration, or designing and deploying security solutions; or an equivalent combination of education, training, and experience.

NOTE:

Preference may be given to applicants who possess the following:

One or more Information Security Certifications such as CompTIA: Security+, GIAC Certification: GCWN, GSEC, ISC2: CISSP, SSCP, CCSP, Cloud Security Alliance: CCSK.

SELECTION REQUIREMENTS

This position requires applicants to complete an interview. The interviewed candidate(s) possessing the qualifications best suited to fulfill the responsibilities of the position, based on the interview will be selected.

APPLICATION EVALUATION: Initial evaluation will be based on information provided on the application and the documents submitted. Department of Human Resource staff will review applications after the final posting date. Staff will follow any and all required Employment/Hiring Plan provisions, federal, state and local laws, and Collective Bargaining Agreements when applicable. Staff will apply hiring preferences as required by the municipal code. Placement on an eligibility list is not an offer or guarantee of an interview nor employment with the City of Chicago.

COMMITMENT TO DIVERSITY: To further our commitment to hiring applicants with diverse experience the City of Chicago has adopted the following ordinances 2-74-020 and 2-74-075. The ordinances provide a preference to applicants who meet minimum qualifications and who are veterans of the Armed Forces, and/or residents of Socio-Economically Disadvantaged Areas (SEDA) and/or Chicago Public School (CPS) high school graduates to be referred to departments for consideration. These hiring preferences do not apply to bidders, as Collective Bargaining Agreements define the hiring process for bidders. For positions covered by a collective bargaining agreement, bidders will be considered before external candidates.

ALL REFERENCES TO POLITICAL SPONSORSHIP OR RECOMMENDATION MUST BE OMITTED FROM ALL APPLICATION MATERIALS SUBMITTED FOR CITY EMPLOYMENT.

The City of Chicago is an Equal Employment Opportunity and Military Friendly Employer.

City of Chicago

Brandon Johnson, Mayor