Cybersecurity Engineer

Required Qualifications

Vocational/Educational Requirement:

Requires any combination of education and experience equivalent to a bachelor’s degree in computer science, cybersecurity, or a closely related field.

Experience

In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [ PCI ], Health Insurance Portability and Accountability Act [ HIPAA ]).

Special Certifications And Licenses

Requires a valid driver’s license and a driving record that is in compliance with City Driving Standards . Industry-related certifications (e.g. ( ISC )2 Certified Information Systems Security Professional [ CISSP ], , CompTIA CySA+, GIAC CSEC ) are preferred but not required.

Special Requirements

Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies. Emergency operations support work and work locations may be outside of normal job duties.

Preferred Qualifications

• Experience with information system security and network security practices – Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations
• Experience with next‑generation firewalls, network security configurations, endpoint/ XDR , and cloud architectures
• Strong understanding of Zero Trust principles and NIST / CIS hardening standards
• Experience with cybersecurity risk management, threat analysis and incident response
• Working knowledge of security frameworks and compliance regulations; NIST CSF , PCI , HIPAA
• 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
• 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
• 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
• 1 year of experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
• Experience architecting hybrid on‑prem/cloud security models.
• Knowledge of IoT/OT/ SCADA security.
• Experience with CASB , SaaS posture management, DLP , and email security platforms.
• Strong understanding of regulatory requirements and industry standards.
• Experience with third-party, vendor supply chain security management practices