1041 Cyber Security Defense Response Engineer
|Department||Department of Technology|
|Date Opened||10/4/2019 1:20:00 PM|
|Salary||$48.00 - $60.36/hour; $8,320.00 - $10,463.00/month; $99,840.00 - $125,554.00/year|
|Job Type||Permanent Exempt|
Applicants are encouraged to apply immediately as this recruitment may close at any time but not earlier than October 21, 2019. This position is open until filled.
The Department of Technology is the centralized technology services provider within San Francisco City & County government, delivering technology infrastructure and services to approximately 33,000 employees and 800,000 residents. The department has an annual operating budget of over $130M and contains over 260 employees. Core service areas include: Infrastructure and Operations, Technology Security, Service Delivery & Management, Enterprise Applications, Project Management Office, Public Safety Systems & Writing, Technology Administration, Policy & Governance and IT Public Communications.
The Cybersecurity Defense Engineer reports to the Cybersecurity Defense Manager. This role proactively monitors the IT infrastructure and data environments for security incidents and participates in security incident investigation and resolution for security service offerings, including Cloud Computing (automated virtualization technologies). The successful candidate for this position is a highly motivated individual, with a good IT security background who excels operating security technology. We seek a self-starter who works effectively with minimal supervision in a highly dynamic environment.
Essential Job Functions and Duties:
Under the direction of the Cybersecurity Defense Manager, you will:
Detection, monitoring, analysis, resolution of security incidents, participate in providing containment recommendation
Coordinate escalations to internal support teams to ensure timely delivery of incident resolutions
Perform network/system/application/log intrusion detection analysis and trending
Perform tuning of the SIEM filters and correlations to continuously improve monitoring
Participate in the security incident handling efforts in response to a detected incident, and coordinate with other stakeholders
Ensure that Service Level Agreements are met
Maintain standard operating procedures, processes and guidelines
Automate security analysis, administration and remediation procedures, workflows and tasks
Maintain awareness of trends in security regulatory, technology, and operational requirements
Participate in audits
The Permanent Exempt - Full Time position is exclude by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. The anticipated duration of this project position is thirty-six (36) months and will not result in an eligible list or permanent civil service hiring.
Nature of Work:
Candidate must be willing to work a 40-hour work week as determined by the department.
Incumbent will conduct the majority of work at the Department of Technology, 1 South Van Ness, 2nd Floor, San Francisco, CA 94103. However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary.
An associate degree in computer science, or a closely related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field].
Experience in analyzing, installing, configuring, enhancing and/or maintaining the components of an enterprise network may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/ forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field.
Completion of the 1010 Information Systems Trainee Program may be substituted for the required degree.
Experience in analyzing, installing, configuring, enhancing and/or maintaining the components of an enterprise network.
Criminal Justice Information Services (CJIS) Security Clearance may be required. (See Security Clearances and Background Investigations below).
Medical Testing: Prior to appointment, eligible candidates must successfully pass the TB testing process.
Security Clearances & Background Investigations: Positions in this classification may require that successful candidates who become eligible for appointment may be required to go through a background investigation to determine the candidate's suitability for employment in this classification. Factors considered in the investigation may include employment history, use of illegal/controlled substances. Reasons for rejection based on this investigation may include, but not limited to: applicable convictions, repeated or serious violations of the law, inability to accept supervision, inability to follow rules and regulations, falsification of application materials and/or other relevant factors. Failure to obtain and maintain security clearance may be basis for termination.
How To Apply
to register an account (if you have not already done so) and begin the application process.
Select the desired job announcement
Select “Apply” and read and acknowledge the information
Select either “I am a New User” if you have not previously registered, or “I have Registered Previously”
Follow instructions on the screen
Computers are available for the public (from 8:00 a.m. to 5:00 p.m. Monday through Friday) to file online applications in the lobby of the Dept. of Human Resources at 1 South Van Ness Avenue, 4th Floor, San Francisco.
Applicants may be contacted by email about this announcement and, therefore, it is their responsibility to ensure that their registered email address is accurate and kept up-to-date. Also, applicants must ensure that email from CCSF is not blocked on their computer by a spam filter. To prevent blocking, applicants should set up their email to accept CCSF mail from the following addresses (@sfgov.org, @sfdpw.org, @sfport.com, @flysfo.com, @sfwater.org, @sfdph.org, @asianart.org, @sfmta.com, @sfpl.org, @dcyf.org, @first5sf.org).
Applicants will receive a confirmation email that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received.
All work experience, education, training and other information substantiating how you meet the minimum qualifications must be included on your application by the filing deadline. Information submitted after the filing deadline will not be considered in determining whether you meet the minimum qualifications.
Applications completed improperly may be cause for ineligibility, disqualification or may lead to lower scores.
Note: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.
If you have any questions regarding this recruitment or application process, please contact the exam analyst, Carol Wong, by telephone at 628-652-5045, or by email at firstname.lastname@example.org.
Supplemental Questionnaire (Qualifying and Information):
Applicants will be prompted to complete a supplemental questionnaire as part of the online employment application. It is essential that applicants provide complete information in identifying their education, experience, training, and licensure, consistent with the information provided on their application. The supplemental questionnaire will be used to assess the applicant's knowledge, skills, and abilities as they relate to this position. Applicants must also complete the official application. The information in the supplemental questionnaire will not be scored and is collected for informational purposes.
The Department may establish and implement additional screening mechanisms to comparatively evaluate the qualifications of candidates. If this becomes necessary, only those applicants whose qualifications most closely meet the needs of the Department will be invited for an interview.
Note: Applicants who meet the minimum qualifications are not guaranteed to advance through all of the steps in the selection process.
Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. If education verification is required, information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at http://sfdhr.org/index.aspx?page=456
The City and County of San Francisco is an equal opportunity employer. Minorities, women, and persons with disabilities are encouraged to apply.
As a selected candidate for a job, you will be fingerprinted, and your fingerprints will be sent to the California Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI). The resulting report of your conviction history (if any) will be used to determine whether the nature of your conviction (or arrest, in limited circumstances) conflicts with the specific duties and responsibilities of the job for which you are a selected candidate. If a conflict exists, you will be asked to present any evidence of rehabilitation that may mitigate the conflict, except when federal or state regulations bar employment in specific circumstances, such as:
Candidates for positions with the Unified School District and the Community College District may be disqualified from consideration should their conviction history not meet the standards established under the California Education Code.
Candidates for positions with the Recreation and Park Department may be disqualified from consideration should their conviction history not meet the standards established under California Public Resources Code 5164.
Having a conviction history does not automatically preclude you from a job with the City.
If you are a selected candidate, the hiring department will contact you to schedule a fingerprinting appointment.
Disaster Service Workers
All City and County of San Francisco employees are designated Disaster Service Workers through state and local law (California Government Code Section 3100-3109). Employment with the City requires the affirmation of a loyalty oath to this effect. Employees are required to complete all Disaster Service Worker-related training as assigned, and to return to work as ordered in the event of an emergency.
Terms of Announcement:
Applicants must be guided solely by the provisions of this announcement, including requirements, time periods and other particulars, except when superseded by federal, state or local laws, rules or regulations. Clerical errors may be corrected by the positing the correction on the Department of Human Resources website at www.jobapscloud.com/sf.
Applicants with disability who meet the minimum eligibility requirements for this job announcement can find information on requesting a reasonable ADA Accommodation at: http://sfdhr.org/information-about-hiring-process#applicantswithdisabilities
General Information concerning City and County of San Francisco Employment Policies and Procedures: Important Employment Information for the City and County of San Francisco can be obtained at http://sfdhr.org/information-about-hiring-process or hard copy at 1 South Van Ness Avenue, 4th Floor.
Copies of Application Documents:
Applicants should keep copies of all documents submitted, as these will be not returned.
Right to Work:
All persons entering the City and County of San Francisco workforce are required to provide verification of authorization to work in the United States. Please be informed that the Department of Technology will not sponsor visa applications/transfers.
Issued: October 4, 2019
Human Resources Director
Department of Human Resources
Recruitment ID Number: PEX-1041-099008
All employees hired on or after January 10, 2009 will be required (pursuant to San Francisco Charter Section A8.432) to contribute 2% of pre-tax compensation to fund retiree healthcare. In addition, most employees are required to make a member contribution towards retirement, ranging from 7.5%-13.25% of compensation. For more information on these provisions, please contact the personnel office of the hiring agency.
Click on a link below to apply for this position:
|Fill out the Supplemental Questionnaire and Application NOW using the Internet.|
|View and print the Supplemental Questionnaire.||This recruitment requires completion of a supplemental questionnaire. You may view and print the supplemental questionnaire here.|