Cybersecurity Analyst

This position is responsible for implementing, supporting, and managing the City of Burlington's cybersecurity initiatives and policies. Responsibilities include design, implementation, and review of security controls, monitoring of internal/external access controls, and implementing security safeguards to protect the confidentiality, integrity, and availability of the digital assets of the City of Burlington. This role will be focused on protecting system boundaries; keeping computer systems, applications and network devices hardened against attacks, maintaining the integrity, accessibility, and availability of the City's digital data assets, monitoring and responding to significant security events, and ensuring the stability, integrity, and secure operation of critical in-house and cloud-based systems and networks.

Union Affiliation: Non-Union

Pay Grade 19: $75,720.22-$84,474.15 Annually

• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organization's data, systems, networks, and security tools including, but not necessarily limited to: IDS, IPS, Firewall, VPN, IDP, WAF, DLP, SIEM, Web Proxies, and Vulnerability Scanners

• Work closely and collaborates with third party teams (including but not limited to the City's contracted MSSP and the Cybersecurity & Infrastructure Security Agency - CISA) to analyze, investigate, and respond to security incidents, sharing expertise and insights to enhance the organization's cyber defense strategy.

• Lead the design and deployment of group policy to harden endpoints and infrastructure including networks, data repositories, and other digital assets.

• Provide consultation to the I&T team in preparation and implementation of patch management and firmware management.

• Support other I&T staff in managing backup infrastructure, including testing and preparation of disaster recovery plans and policies.

• Detect, investigate, and perform recovery from security incidents, and assist with incident response plans.

• Conduct threat and vulnerability risk assessments to determine security requirements and proactively fix security flaws and vulnerabilities.

• Conduct analysis of security requirements and controls to identify gaps and provide recommendations of industry best practices, trends, and technology products.

• Support the development of and adherence to policies, standards, and procedures for data

 governance and data management.

• Assist in the identification, evaluation, deployment, and optimization of security technologies.

• Design and present annual cybersecurity training to City of Burlington staff members.

• Work closely with all City of Burlington departments to ensure adequate security solutions are in place for all systems and platforms to sufficiently mitigate identified risks and meet business objectives.

• Ensure that the organization's data and infrastructure are protected by enabling the appropriate security controls.

• Provide security design, consultancy, and assessment services and introduce improvements in technical security standards and security implementation patterns and designs.

• Maintain awareness of latest security risks, analyze potential impact of new threats and exploits, and communicate risks to relevant business units.

• Create reports on security incidents and overall enterprise security status.

• Develop security-related procedures and related metrics; review and contribute to the improvement and standardization of security systems across the City of Burlington.

• Create and implement cybersecurity best practices in accordance with the City's access control, disaster recovery, business continuity, and risk management policies, plans, and procedures.

• Perform daily administrative tasks, reporting, and communication with relevant departments in the organization.

• Collaborate as a member of the I&T team sharing information, mentoring, cross-training, and providing coverage as directed by the supervisor.

Non-Essential Job Functions:

Performs other duties as required.

• Ability to actively support City diversity, equity, and cultural competency efforts within stated job responsibilities and work effectively across diverse cultures and constituencies.

• Demonstrated commitment to diversity, equity and inclusion as evidenced by ongoing training and professional development.

• Bachelor of Science degree in Computer Science, IT, or related field with 3 years of experience in an information technology role responsible for servers and networks, including 2 years of experience implementing cybersecurity best practices and initiatives, incident detection, incident response.

• Additional experience may be substituted for a degree requirement on a two-for-one-year basis and/or certifications including at least 3 of the following: Cisco Certified CyberOps Professional, Certified Ethical Hacker, Certified Information Systems Security Professional, DevSec Ops Foundation, Certified Information Security Manager, Certified in Risk and Information Systems Control, Certificate of Cloud Security Knowledge)

• Direct experience with cybersecurity concepts including but not limited to firewalls (functionality and maintenance), operating system and software security controls, VMWare security, anti-virus, and endpoint security.

• Direct experience securing and managing Windows server operating systems and Microsoft Active Directory domains required.

• Experience with setup, configuration, and maintenance of IPV4/IPV6, DHCP, DNS, RADIUS, VPN, 802.11, VoIP, VLANs, SSL, MFA, and zero-trust environments using best security practices required.

• Direct experience with setup, configuration, and maintenance of switches, routers, firewalls, and wireless technology

• Direct experience with scripting, i.e., batch files, Python, and PowerShell required.

• Familiarity with security-related aspects of database systems, i.e., Oracle, MS SQL, MySQL, PostgreSQL preferred.

• Familiarity with network, server, storage virtualization, i.e., MDS switching infrastructure, VSAN, VRF, VPN, and VMWare vSphere required.

• Ability to quickly learn and apply new technology, processes, procedures, and knowledge as the cybersecurity field changes.

• Must possess excellent oral, written, and analytical skills.

• Ability to provide technical presentations and training as needed.

• Ability to establish and maintain positive working relationships with co-workers, customers, and other personnel.

• Ability to work effectively in a team-oriented, collaborative environment.

• Ability to multi-task, work under minimal supervision, and adapt quickly to changing priorities and deadlines.

• Ability to travel to and from various sites within the City of Burlington.

• Ability to work beyond the normal forty (40)-hour work week as needed.

• Regular attendance is necessary and is essential to meeting the expectations of the job functions.

• Ability to understand and comply with City standards, safety rules and personnel policies.

Promoting a culture that reveres diversity and equity

The City of Burlington is proud to be an equal opportunity employer, and we are strongly committed to creating a dynamic and equitable work-force that mirrors the population and world that we serve. We do not discriminate on the basis of political or religious affiliation, race, color, national origin, place of birth, ancestry, age, sex, sexual orientation, gender identity, marital status, crime victim status, veteran status, disability, HIV positive status, or genetic information in employment or the provision of services.

In addition to being an equal opportunity employer we actively encourage applicants who can contribute to our growing diversity to apply.

Applications for our employment opportunities are only accepted online through our

Government Jobs website.

For accessibility information or alternative formats, please contact Human Resources Department at 802-540-3057 or careers@burlingtonvt.gov.