IT Security Analyst

City of Tacoma•Tacoma, WA

About The Position

Tacoma Power’s Utility Technology Services (UTS) is seeking a motivated and technically skilled cybersecurity professional to support its cybersecurity operations. This role helps protect enterprise and operational technology environments through security monitoring, threat analysis, investigation, and response activities. This position offers the opportunity to contribute to the security and reliability of critical utility infrastructure by administering security tools, including SIEM and EDR platforms, conducting threat hunting, and collaborating with cybersecurity, infrastructure, and operational teams. The position performs daily cybersecurity operations to identify and respond to potential threats, support compliance with cybersecurity standards such as NERC CIP, and help ensure the confidentiality, integrity, and availability of Tacoma Public Utilities (TPU) systems. This role requires strong technical and analytical skills, sound judgment, and effective communication to strengthen cybersecurity practices and support the resilience and reliability of critical utility operations.

Requirements

Bachelor's degree in information technology, cybersecurity or directly related field
2 years of progressively responsible information technology experience related to assignment
Washington State Driver's License

Nice To Haves

CompTIA Security+, ISC2 Systems Security Practitioner (SSCP), GIAC Security Essentials, or equivalent certification

Responsibilities

Administer and maintain SIEM dashboards, alerts, runbooks, and log integrations while monitoring security events and investigating anomalies using SIEM, EDR, and network security tools.
Conduct proactive threat hunting to identify malicious activity, security misconfigurations, and indicators of compromise, supporting early detection and mitigation of potential threats.
Participate in cybersecurity incident response activities, including triage, containment, remediation, documentation, and lessons learned, while coordinating with internal teams to validate events and gather forensic data.
Manage endpoint security agents, policies, tuning, and detections; review and escalate alerts and assist system owners with remediation efforts.
Perform assigned NERC CIP-related activities, including log reviews, evidence gathering, artifact maintenance, secure configuration validation, and compliance documentation and recordkeeping.
Support vulnerability management activities, including scanning, ticketing, validation, and coordination with asset owners to facilitate remediation and risk reduction.
Contribute to security exception reviews, control recommendations, and risk discussions to support effective cybersecurity practices and risk management.
Assist with the onboarding and integration of security tools and identify opportunities for automation and operational improvements to strengthen cybersecurity capabilities.