Security Engineer

City of Gainesville•Gainesville, FL

About The Position

The City of Gainesville is seeking a Security Engineer for its Technology department. The role is responsible for protecting the confidentiality, integrity, and availability of city systems and data, and modernizing security across a mid-sized environment. The ideal candidate has expertise in core IT security practices, familiarity with CJIS compliance standards, and a commitment to building technology solutions, continuous learning, automation, and scripting. The position calls for independent initiative and security solutions that enable business outcomes while protecting systems without unnecessarily hindering operations. A hybrid option may be available. The successful candidate will design, implement, and manage security solutions; monitor and respond to security incidents, vulnerabilities, and threats; conduct security assessments, audits, and penetration tests; maintain security policies and standards; and work with IT teams to integrate security into architecture, development, and operations. The role also manages security platforms and tools, provides cybersecurity training and guidance, and keeps current with emerging threats and compliance requirements.

Requirements

Bachelor’s degree from an accredited college or university in cybersecurity, computer science, management information systems, business administration, or a related field, or equivalent experience.
Three years of experience in cybersecurity engineering, preferably with a mid-sized organization.
Strong understanding of network security, identity and access management (IAM), M365 security, cloud security, and vulnerability management.
Familiarity with CIS, NIST, ISO 27001, and other security frameworks.
Proficiency with security tools such as firewalls, endpoint detection and response, network detection and response, SIEM, SOAR, email security, and web security gateways.
Proficiency with a scripting language such as Python or PowerShell.
Excellent problem-solving, communication, and documentation skills.
Ability to manage confidential information with discretion and professionalism.
Knowledge of audit processes and ability to interface with internal and external auditors and regulators.
Knowledge of security performance metrics and reporting tools.
Ability to foster a culture of security while enabling operational excellence through technology and innovation.

Nice To Haves

Experience with CJIS Security Policy implementation and compliance.
Experience working in a government or public-sector IT environment.
CISSP, CISM, CEH, GSEC, CompTIA Security+, or Microsoft Certified: Azure Security Engineer Associate certification.

Responsibilities

Design, implement, and manage security solutions to protect city infrastructure, networks, and data.
Monitor and respond to security incidents, vulnerabilities, and threats across systems and applications.
Conduct regular security assessments, audits, and penetration tests to identify risks and recommend mitigation strategies.
Maintain and enforce security policies, procedures, and standards in alignment with CJIS and other regulatory frameworks.
Collaborate with IT teams to integrate security into system architecture, software development, and operational workflows.
Manage endpoint protection, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM/SOAR platforms, IAM, CASB, MFA, SSO, and related tools.
Provide training and guidance to staff on cybersecurity best practices and awareness.
Stay current with emerging threats, technologies, and compliance requirements relevant to municipal IT environments, and incorporate threat feeds into operational security tooling.
Attend work on a continuous and regular basis.
Perform related duties as required or assigned by the Information Security Officer (ISO).