Information Security Analyst I - City

PAY AND FAIR LABOR STANDARDS ACT (FLSA) STATUS :

Pay Range: 516 Hourly Rate: $35.81 - $54.80 FLSA Status: Exempt The normal starting pay for this position is the minimum of the pay range listed above. A higher rate of pay may be considered, dependent on the qualifications and experience of the selected applicant and/or the City’s step placement policy.

APPLICATION, HIRING, AND BACKGROUND

When completing the application, applicants will be asked to respond to application questions. These application questions are based on theJob Requirementsfor the position. Completion of the application questions is required. Applicant responses to the application questions must specifically answer the questions asked. Responses to application questions must be supported by work history/information listed on the application/resume, sufficient to demonstrate qualifications for the position. Applicants may upload only two attachments. Attachments may include, but are not limited to a resume, cover letter, DD214 or NGB Form 22, transcripts, etc. Applicants may also choose to combine documents into one field for upload. Applications may not be reviewed if specific responses to application questions have not been provided. Each application submission is reviewed independently. For detailed information about the City’s hiring and background processes, check out the: : Quick Guide to Hiring and Background Checks If you have questions, check out the: Frequently Asked Questions

TOTAL REWARDS

At the City of Oklahoma City, our Total Rewards package is designed to honor your service, fuel your growth, and support every part of your life. We offer: Competitive pay An average of $22,000 annuallycontributed toward yourbenefits and retirement A comprehensive package designed to support your health and wellness, financial security, work-life balance, and personal and professional growth and development Explore all the ways we invest in you: City of Oklahoma City Total Rewards

POSITION DESIGNATIONS

This job classification has been designated as a safety sensitive job classification in accordance with the Oklahoma Medical Marijuana and Patient Protection Act, 63 O.S., § 427.1 et seq., (OSCN 2019), effective August 29, 2019. This means employees in this job classification can be subject to disciplinary action up to and including termination if they test positive for marijuana components or metabolites, even if they possess a medical marijuana license. This job classification has been designated as a cyber security sensitive job classification effective June 26, 2023 , in order to comply with United States Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services (CJIS) Division’s Criminal Justice Information Services Security Policy (Version 5.9.2, 12/07/2022), 5.12 Policy Area 12 Personnel Security. The policy requires national fingerprint-based records checks be conducted prior to granting access to criminal justice information for all personnel who have unescorted access to unencrypted Criminal Justice Information (CJI) or unescorted access to physically security locations or controlled areas (during times of CJI processing). Employees in this job classification will be subject to a Criminal Justice Information Services (CJIS) Interstate Identification Index (III) Fingerprint Background check after receiving a conditional offer of employment. Additionally, employees in this job classification must complete the required CJIS Security and Privacy Training and pass the online certification test.

JOB SUMMARY

This job is located in the Technology Infrastructure Division of the Information Technology Department within the City of Oklahoma City and is under the direction of the Information Security Manager. The Information Security Analyst I will apply and monitor information security systems, tools, policies, and procedures required to protect critical City assets.

ESSENTIAL JOB FUNCTIONS

Trains professional staff in security impact to specialized City applications and procedures and assists in preforming administrative functions. Identifies unique system configurations to develop standard information security documentation. Adjusts capabilities to prescribed information security controls and countermeasures to mitigate risk to acceptable levels. Audits cybersecurity technology systems and configurations for compliance to frameworks, policies, regulations, and law. Identifies, assesses, documents, tracks, prioritizes, and remediates cybersecurity vulnerabilities. Researches, analyzes, documents, and evaluates software applications and hardware systems. Performs other duties as assigned.

VETERANS PREFERENCE

Honorably discharged veterans of the United States Active Duty Armed Forces, National Guard, and Reserve Forces who are not currently employed full-time by the City of Oklahoma City and who meet the qualifications for the position shall be given preference.To receive preference, veterans must submit verification of honorable discharge from the United States military service (Department of Defense Form DD214 or NGB Form 22) prior to the closing date of the vacancy announcement.

MINIMUM QUALIFICATIONS

Bachelor’s degree or higher in Management Science and Computer Systems, Management Information Systems, Cybersecurity, or field related to the position; or equivalent combination of education and experience, substituting one year of experience in Cybersecurity for each year of education required. Minimum of four (4) years of experience in Cybersecurity.

KNOWLEDGE, SKILLS, AND ABILITIES

Knowledge of securing systems, including web, database, and remote access systems. Knowledge of Data Loss Prevention. Knowledge of penetration and vulnerability testing. Knowledge of Security Information and Event Management (SIEM) and other logging systems. Knowledge of enterprise level risk management platforms. Knowledge of Cybersecurity vulnerability risk classification. Knowledge of Cybersecurity incident response. Knowledge of documenting systems, processes, and procedures. Knowledge of and ability to apply administrative and managerial techniques and methodologies. Knowledge of security frameworks and regulatory compliance, such as ISO 27001 or NIST 800. Skill in communicating technical information to non-technical personnel, both verbally and in writing. Ability to work with both internal and external personnel through coordinated efforts. Ability to organize information pertaining to work assignments. Ability to obtain an employer approved security certification within one (1) year.

PREFERRED QUALIFICATIONS

Advanced proficiency with SIEM/SOAR ecosystems, including pattern recognition, developing threat hunting queries, building and maintaining playbooks, performing deep log analysis, orchestrating log workflows, and integrating security tools through APIs to enhance automated detection and response. Skill in analyzing suspicious files, email attachments, scripts, and URLs; understanding malicious behaviors; and using sandboxing tools. Ability to analyze PCAPs, review firewall/IDS/IPS alerts, understand protocol behavior, and spot lateral movement or exfiltration patterns. Understanding of modern identity threats, such as token theft, Kerberos-based attacks, credential harvesting techniques, MFA fatigue, OAuth misuse, and attempts to bypass conditional access controls. Expertise in incident scoping, containment and remediation, including executing isolation actions, terminating malicious processes, collecting volatile memory, and validating eradication steps to ensure threats are fully removed.

COMPETENCIES

One City, One Team (Teamwork/Team Oriented) (1) Recognizes, values, and leverages the ideas, opinions, and perspectives of others; (2) participates willingly and effectively as a team lead or team member; (3) builds consensus; fosters team commitment, spirit, pride, and trust; (4) collaborates with others to accomplish goals and objectives and achieve results; (5) expresses facts, ideas, messages, and information (technical and non-technical) to individuals or groups clearly, concisely, accurately, understandably, with honesty, tact, and diplomacy and in a manner that is appropriate for the intended audience; (6) actively listens, clarifies information as needed; (7) [Core Value One City, One Team] shares information, resources and solutions across departments; (8) [Core Value One City, One Team] asks for help early and offers it often; (9) [Core Value One City, One Team] collaborates across teams before decisions are made. Service First (Customer Centric) (1) Demonstrates commitment to public service; (2) serves and satisfies internal and external customers in a timely and effective manner; (3) establishes, commits to, and maintain high standards for producing quality work products and being responsive to customers; (4) supports the Department/City's mission; develops and executes strategies with the customer in mind; (5) [Core Value Service First] acts quickly and follows through until the job is complete; (6) [Core Value Service First] serves everyone with genuine respect, diligence and professionalism; (7) [Core Value Service First] makes decisions with the people we serve in mind. Respect Always (Leads Through Influence) (1) Persuades others; builds consensus through give and take; (2) gains cooperation from others to obtain information and accomplish goals; (3) works with others towards achieving agreements that may involve exchanging resources or resolving differences; (4) understands the concepts, practices, and techniques used to identify, engage, influence, and monitor relationships with individuals and groups connected to a work effort including those actively involved; (5) leads through influence over the process and its results, and those who have a vested interest in the outcome (positive or negative). (6) [Core Value Respect Always] listens with curiosity and speaks with care; (7) [Core Value Respect Always] embraces different perspectives and lived experiences; (8) [Core Value Respect Always] gives feedback constructively and receives it openly. Own the Outcome (Execution and Results) (1) Sets well-defined and realistic goals and high standards of performance for self or self and others; (2) displays a high level of initiative, effort, and commitment toward performing work; (3) completes assignments in a thorough, accurate, and timely manner, and delivers results; (4) works with minimal supervision, is motivated to achieve, and demonstrates responsible behavior; (5) demonstrates understanding of all aspects of the job and application of accrued knowledge in carrying out duties and responsibilities; technical knowledge; skill in the techniques, equipment, procedures, and work required; (6) recognizes opportunities and takes action for improvement to programs, policies, procedures, practices, and processes; (7) understands and is able to apply the principles, methods, and tools of quality improvement; (8) collects, examines, analyzes, and interprets data from a variety of sources; (9) makes data-driven recommendations/decisions and achieves results; (10) effectively achieves results through others to achieve the Department or City's mission; (11) [Core Value Own the Outcome] takes initiative to fix it or escalates issues; (12) [Core Value Own the Outcome] follows through on commitments; (13) [Core Value Own the Outcome] speaks up when accountability is missing. Keep Getting Better (Commitment to Continuous Improvement) (1) Recognizes opportunities for improvement with regard to programs, policies, procedures, practices, and processes; (2) understands and is able to apply the principles, methods, and tools of quality improvement; (3) collects, examines, analyzes, and interprets data from a variety of sources; (4) makes data-driven recommendations/decisions and achieves results; (5) [Core Value Keep Getting Better] takes time to reflect and act on what is working and what is not; (6) [Core Value Keep Getting Better] learns from mistakes without blaming; (7) [Core Value Keep Getting Better] supports self and other’s development and growth. Empathetic Leadership (1) Fosters a workplace where employees are engaged; (2) seeks to know and learn about, and respects the values, attitudes, and beliefs of others; (3) welcomes varied ideas, perspectives, and thoughts when carrying out the work of the organization and making decisions; (4) builds trust through transparency, open communication, feedback, consistency, and humility; (5) seeks to build high performing teams through practices that demonstrate a commitment to hiring the most qualified candidates; promotes advancement opportunities for all (e.g., coaching, mentoring, providing personal and professional development opportunities); (6) resolves conflict and maintains effective working relationships with others through open dialogue, collaboration, empathy, active listening, understanding, tact, diplomacy, and professionalism; (7) treats others with fairness and dignity; (8) demonstrates emotional maturity; and (9) recognizes contributions and celebrates accomplishments. Note: This competency is not applicable for employees who are not supervisors. Judgment (1) Plans, coordinates, and executes business functions efficiently, effectively, and in a fiscally responsible manner; (2) identifies risks and develops and implements measures to avoid, mitigate, or minimize those risks; (3) makes effective, timely, well-informed, objective, and transparent work-related decisions; (4) exhibits emotional maturity and stability, effectively manages conflict, and remains optimistic and calm during stressful situations; (5) uses resources effectively to achieve results aligned with organizational priorities; (6) applies understanding of financial management/budgeting principles to ensure decisions are fiscally sound and responsible and in accordance with policies, procedures, processes, rules, regulations, and laws; (7) makes business decisions that drive positive, fiscally responsible performance; (8) manages ambiguity, business insight, financial acumen, makes decisions using data and insight that achieves the best outcome for the department and City. Talent Development (1) Provides tools, materials, equipment, and resources; (2) provides performance feedback, coaching, mentoring, encouragement, and support; (3) discusses personal and professional goals; (4) provides formal and informal learning and development opportunities that support achievement of personal and professional goals; (5) attracts and develops talent; (6) manages performance throughout the department or City; (7) sets the leadership tone for area of responsibility. Note: This competency is not applicable for employees who are not supervisors. Strategic Thinking (1) Thinks conceptually, imaginatively, and systematically; (2) envisions the future; (3) defines the vision, direction, and goals; (4) develops a road map for achievement; (5) anticipates change and plans for it; (6) considers long-term value and consequences; (7) influences others to achieve results; (8) understands where the organization is headed; knows the organization's mission and functions, and how its social, political, and technological systems work; (9) aligns business strategies to long-term success of the City; (10) sets the vision, direction and compelling course of action; (11) operates effectively within the systems, programs, policies, procedures, codes, ordinances, rules, and regulations of the organization; (12) knows industry and stays ahead of best practices; (13) understands the political environment, management priorities, staff roles and responsibilities, and grasps external factors impacting the organization; (14) identifies when issues need to be escalated to higher authorities and effectively alerts appropriate officials. Agility (1) Values collaboration, communication, and feedback and is flexible and open to new ideas; (2) learns rapidly and transforms learning into action; (3) examines processes and practices to perform work most effectively; (4) demonstrates courage and willingness to take calculated risks; (5) assesses readiness; proposes new approaches, methods, and technologies plans, implements, and evaluates change in a transparent, positive, and thoughtful manner; (6) exhibits emotional maturity and stability, effectively manages conflict, and remains optimistic and calm during stressful situations; (7) rapidly adapts to change and leads others through change, while producing tangible results and identifying new opportunities.

WORKING CONDITIONS

Primarily indoors in a climate-controlled environment. Occasionally required to work beyond normal working hours or to change working hours when conducting training or systems analysis. Occasional #J-18808-Ljbffr Socket.dev