Are you a cyber security professional who is passionate about cyber security?Are you a goal-driven, detail-oriented, team player looking for an engaging role where you can help the greater good?

As a Systems Security Engineer with the City of Chesapeake, you will use your superpowers to safeguard City Information Systems, data, and assets. You will serve as a vital member of the security team, participating in security operations, identifying, investigating, and monitoring for security threats, and improving the overall security posture. At the City of Chesapeake, you will have opportunities to grow your cyber security skills as you help us securely modernize our enterprise infrastructure and continue to embrace new technologies.The Systems Security Engineer performs two core functions for the City of Chesapeake. The first is the day-to-day operations of the in-place security solutions to include the identification, investigation, and resolution of security breaches detected by those systems. The second is to review, assess and continuously monitor the security posture of the network and information systems to ensure compliance with City security policies, industry best practices, and regulatory requirements. Secondary tasks include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments. The Systems Security Engineer is expected to be fully aware of the City's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.

Duties and Responsibilities

• Participate in the planning and design of enterprise security architecture, under the direction of the CyberSecurity Operations Lead.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the Systems Security Manager, where appropriate.
• Defines develop, and review security requirements standards and procedures; conducts risk assessments and risk analysis of complex systems to determine if they have been designed and established to comply with established standards.
• Perform the deployment, integration, and initial configuration of new security solutions and enhancements to existing security solutions in accordance with City policies, standards, and security best practices.
• Works with internal teams to ensure new and existing systems and applications meet security and compliance requirements according to City security policies, compliance requirements, and applicable laws
• Analyzes and develops information security governance, including organizational policies, procedures, standards, baselines, and guidelines with respect to information security and the usage and operation of information systems.
• Works with internal enterprise operations team to define, develop, and review cloud platform security measures.
• Supports the design and implementation of a common and consistent vendor risk management program to effectively manage vendor risk
• Conducts investigations of security violations and breaches and recommends solutions; prepares reports on intrusions as necessary and provides analysis summary to management.
• Responds to complex queries and requests for computer security information and reports from both internal and external customers.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Monitor in-place security solutions for efficient and appropriate operations.
• Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
• Provide on-call support for cybersecurity-related events as needed.

The City of Chesapeake offers an exceptional range of benefits. Please browse our Benefits Brochure for a full list of benefits and employee perks.

#cybersecurity, #IT, #CISSP, #CompTIACySA+PDN-9dcc4b23-5353-48b4-a275-419cc371f691