"CURRENT SAWS EMPLOYEES ONLY" Senior Information Security Analyst - Cybersecurity chez San Antonio Water System

About the Department

Grade 21:  Salary starts at $79,373.00 annually.  Rate of pay depends on qualifications.  

Position Duties

JOB SUMMARY

The Senior Information Security Analyst is responsible for designing, reviewing, configuring, and monitoring security controls and safeguards to protect the confidentiality, integrity and availability of information systems assets. This role will be focused on keeping computer systems, applications and network devices hardened against attacks, integrating new security tooling with existing environment, evaluating existing security controls and implementing improvements, as well as monitoring and responding to significant security events. 

• Develops, monitors, and maintains cybersecurity tools and systems.  
• Evaluates and manages security tools such as Web Application Firewalls (WAFs), API gateways, runtime protection platforms, and vulnerability management tools (e.g., Burp Suite, OWASP ZAP, Fortify).
• Works closely with other groups, including System Administrators, Network Engineering, Applications, SCADA/I&C and other information system staff to ensure adequate security solutions are in place for all IT systems and platforms to sufficiently mitigate identified risks and meet business objectives.
• Provides security design, consultancy, and assessment services; and introduces improvements in technical security standards and security implementation patterns and designs.
• Leads projects and initiatives to design and verify implementation of various information security controls.
• Detects, investigates and manages recovery efforts from security incidents, and assists with incident response plans.
• Automates security processes and workflows using scripting languages and tools.
• Conducts regular security assessments and audits to identify potential vulnerabilities.
• Designs technical solutions and coordinates with the staff to ensure timely and accurate implementation.
• Supports information security leadership team in strategic planning and development.
• Performs other duties as assigned.

• This position works under limited supervision.
• This position provides functional guidance and may serve as a technical lead in various projects.

• Bachelor’s Degree in Computer Science, Information Systems, or related field from an institution accredited by a recognized accrediting agency, plus four years’ experience as a Security Analyst or related experience.
• Four years’ experience working with Linux and Microsoft.
• At least one of the following professional information/network security certifications required: 

• Relevant certifications such as, Microsoft Azure Solutions Architect Expert, or Linux Systems Administration.  
• Experience with cloud security and DevSecOps practices.
• Experience with programming languages such as Python or Java.

• Knowledge of network security, security-related systems and applications as well as security protocols and related tools, including tcpdump, Wireshark, and Splunk.
• Demonstrated ability to identify security requirements and validate implementation of applicable controls into a robust architecture that sufficiently repels most malicious attacks.
• Ability to establish and maintain effective relationships with internal and external customers and contractor representatives involved with software development, network security, and systems administration.

Working conditions are primarily inside an office environment with travel to various locations on an occasional basis. Physical requirements include occasional lifting/carrying of 70 pounds; visual acuity, speech and hearing; hand and eye coordination and manual dexterity necessary to operate a computer keyboard and basic office equipment. Subject to sitting, standing, reaching, walking, twisting, and kneeling to perform the essential functions. 

May be required to work hours other than regular schedule such as nights, weekends and holidays.