Cyber Security Bus Sys Spec

City of Durham•Durham, NC

5d•Onsite

About The Position

The City of Durham's nationally recognized, award-winning Technology Solutions Department builds and aligns the City's information technology infrastructure so that departments can deliver a superior level of public service. Our team is recognized nationally by the Public Technology Institute, ICMA Center for Performance Measurement and Digital Cities Survey. If you can offer the skills to innovate and the passion to serve, bring your talent to Durham. The purpose of this position is to assist the Senior Cyber Security analyst in the daily management of the City's cyber security program. The Cyber Security Bus Sys Spec will assist the Senior Cyber Security Analyst in conducting security assessments of systems to identify vulnerabilities, providing recommendations for their remediation, and assisting system owners in implementing effective safeguards. Validating that controls are risk rated and risk statements are clearly stated and capture the specific business impact to the judiciary in the event that a deficiency is exploited.

Requirements

High School Diploma or equivalent (GED, HiSet, TASC)
One year of experience in cybersecurity, information security, information technology, network security, systems administration, vulnerability management, security operations, or a closely related field.

Responsibilities

Assist the Senior Cyber Security Analyst in developing security assessment plans for systems, including the objectives, scope, schedule, required documentation, possible risks, and other logistical items for security assessments.
Assist in developing cloud service provider testing approach from security perspective.
Assist the Senior Cyber Security Analyst in providing validation of security control tests for cloud service providers and coordinating access to systems and approvals for scanning activities.
Responsible for assisting the Senior Cyber Security Analyst in conducting ad hoc testing on an as-needed basis to assist with development activities or vulnerability remediation.
Assist the Senior Cyber Security Analyst in reviewing/testing system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context.
Assist the Senior Cyber Security Analyst in documenting plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities.
Responsible for assisting the Senior Cyber Security Analyst in drafting security policies and procedures including the system security plan, and agency specific policies in accordance with NIST requirement.
Assist the Senior Cyber Security Analyst in routinely conducting risk assessments to quantify impacts of vulnerabilities.
Assist the Senior Cyber Security Analyst in recommending appropriate security training program for employees.
May perform additional tasks upon request