Assistant Information Systems Engineer - Security Specialty - City and County of San Francisco - Multiple Departments Citywide - 1041

Benefits

Additional Information

Under general supervision, assists in analyzing, planning, implementing, maintaining, troubleshooting and enhancing large complex systems or networks consisting of a combination that may include mainframes, mini-computers, personal computers, mobile devices, LANS, WANs, servers, data storage and the physical and logical components that integrate these systems together as an enterprise networking backbone. The 1041 Assistant Security Engineer is the entry level in the Engineer series. The class is distinguished from the Journey level by the complexity of the tasks, projects or duties assigned. Positions at this level perform a significant portion of the work assigned to the journey level, but without the independence or full responsibility expected of positions at the journey level. Assignments are generally limited in scope and are set within procedural frameworks established by higher level positions. As experience accrues, the incumbent performs with increasing independence. Work requires incumbents to exercise some judgement in selecting appropriate established guidelines to follow. Significant deviations require prior approval. Interpretation of general administrative or operational policies is sometimes necessary. Serves as an assistant technical architect and systems integrator for large complex systems or networks, with a focus on securing vulnerabilities and reducing risk of system and/or asset compromises. Essential Duties: 1. Maintains and operates information system security controls and countermeasures. 2. Monitors and assists with the implementation of security controls and procedures in business processes related to use of information systems and assets. 3. Monitors information systems for security incidents and vulnerabilities; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends. 4. Responds to information system security incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement. 5. Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets. 6. Monitors trends, news and changes in threat and compliance environment with respect to organizational risk; assists in the execution of plans for compliance and mitigation of risk; assists in the completion of risk and compliance self-assessments and third-party risk and compliance assessments. 7. Assists with the administration of information security training and awareness programs. *This position may include additional duties as assigned.* These minimum qualifications establish the education, training, experience, special skills and/or license(s) which are required for employment in the classification. Education : An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in one of the fields above or a closely-related field]. Substitution : Experience in analyzing, installing, configuring, enhancing and/or maintaining the components of an enterprise network may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/ forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in one of the fields above or a closely-related field. Completion of the 1010 Information Systems Trainee Program may be substituted for the required degree. Verification: Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. If education verification is required, you must provide a copy of your diploma showing major or transcripts showing coursework completed. Information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at http://sfdhr.org/how-verify-education-requirements. If experience verification is required, you must submit a letter from your employer on the employer's business letterhead stating your name, job title(s), dates of service in complete form (mm/dd/yy), a detailed description of duties performed and the verification letter must be signed by the employer or appropriate designee, such as a Human Resources Representative. Performance evaluations showing duties performed and dates of employment may also be submitted as verification documentation. Resumes are NOT verification. All work experience, education, training and other information subs

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at Cityandcountyofsanfrancisco1? Share your experience