Information Systems Security Specialist

City of Las Cruces • Las Cruces, NM

2d

About The Position

Monitors and maintains information security and privacy policies and programs to protect the confidentiality of City information systems and data generated, stored, and transmitted electronically. This is a full-time, regular, exempt position graded RX22. The role involves working in a standard office and at locations throughout the City, with occasional exposure to varied weather, traffic, heat, dust, construction environments, and electrical equipment. It involves moderate physical demands, primarily desk work, including the ability to lift and carry personal computer equipment. The position includes competing demands, multiple tasks, deadlines, occasional work beyond normal business hours, and responding to customer issues. Regular attendance is essential. The position is subject to drug testing under applicable regulations and City policies.

Requirements

• At least one year of cumulative, paid work experience in an information security-related role.
• Demonstrated familiarity and capability with TCP/IP packet capture, tracing, and analysis, and SMTP header analysis.
• A sufficient combination of relevant education and job-related experience to prepare the applicant to perform the position's duties.
• Valid driver's license and an acceptable driving record under City of Las Cruces policy.
• Knowledge of applicable standards, techniques, policies, processes, and procedures for internal controls, risk assessments, business processes, and internal IT control testing.
• Knowledge of networking, Microsoft Active Directory, network design, wireless technologies, intrusion analysis, incident response, operating systems, security technologies and practices, industry standards and frameworks, encryption, and firewall administration.
• Knowledge of malware detection and remediation for Microsoft Windows clients; configuration and management of multiple operating systems, including Windows client and server, Cisco IOS, and common Linux variants; command-line shell scripting; and configuration management.
• Knowledge of record keeping, research and data analysis, customer service, problem resolution, safety practices, business correspondence, computer applications, and City organization and policies.
• Ability to prioritize multiple tasks and meet deadlines; provide customer service; follow applicable policies and standards; maintain accurate records and confidentiality; communicate effectively; prepare and present reports; establish effective working relationships; safely operate relevant tools, equipment, and motorized vehicles; navigate even and uneven surfaces; and exercise sound judgment within established procedures.
• Skills in applying relevant rules and policies, managing assignments, responding to inquiries, working independently or as part of a team, preparing reports and correspondence, researching and analyzing information, maintaining records, using general and specialized software, communicating clearly, and resolving conflicts.

Nice To Haves

• Equivalent to an associate's degree in Computer Science, Information Systems Management, or a related field.
• One year of enterprise-level Microsoft Windows systems administration experience in a multi-server, networked environment using Microsoft Exchange.
• One year of documented full-time experience deploying and managing IT security technologies in an enterprise environment.
• CompTIA Security+ certification, SANS GIAC certification, Microsoft Windows Security for Workstations and Servers, MCSA, Microsoft Windows Systems Hardening, CCNA-Security, MCSE, or other relevant certifications or licenses.
• A combination of education, experience, and training may be applied in accordance with City of Las Cruces policy.

Responsibilities

• Identify, investigate, and document security issues and violations; conduct assessments and audits of information technology systems and processes.
• Prepare and present special and recurring reports; evaluate and analyze information systems to identify security risks and recommend solutions.
• Identify, document, track, and evaluate vulnerabilities and risks; determine remediation tasks; notify management of security breaches or potential issues and recommend solutions to protect information integrity and system security.
• Review the placement and role of servers, network devices, and infrastructure; evaluate City needs and implement information systems options.
• Collaborate with other departments to ensure information systems, servers, networks, and infrastructure are operational and effective.
• Assess system and network-device configurations and compliance with control standards, including patch levels, logging and monitoring, security configurations, account policies, user rights, file-system and registry security, security policies, network services, IP addressing and routing, access control lists, traffic filtering, IPSEC, SSH, tunneling protocols, and VPNs.
• Manage, configure, deploy, and maintain standard security systems, servers, and applications to collect and analyze network information services.
• Participate in meetings and provide feedback and recommendations; understand security needs and communicate them effectively.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed