Technology Engineer - Associate (1041) - Security Specialty - Citywide

Technology Engineer - Associate (1041) - Security Specialty - CitywideUnder general supervision, assists in analyzing, planning, implementing, maintaining, troubleshooting and enhancing technology. Serves as assistant technical contributor for systems or platforms.The 1041 Technology Engineer Associate is the entry level in the Engineer series. The class is distinguished from the 1042 Technology Engineer by the complexity of the systems or networks supported. Positions at this level perform a significant portion of the work assigned to the journey level, but without the independence or full responsibility expected of positions at the journey level. Assignments are generally limited in scope and are set within procedural frameworks established by higher level positions. As experience accrues, the incumbent performs with increasing independence. Work requires incumbents to exercise some judgement in selecting appropriate established guidelines to follow. Significant deviations require prior approval. Interpretation of general administrative or operational policies is sometimes necessary.The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement.Supervision Exercised: NoneEssential Duties:Maintains and operates information system security and privacy controls and countermeasures.Monitors and assists with the implementation of security and privacy controls and procedures in business processes related to use of information systems and assets.Monitors information systems for security incidents, vulnerabilities, and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends.Responds to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement.Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets.Monitors trends, news and changes in threat, compliance, and privacy regulatory environment with respect to organizational risk; assists in the execution of plans for compliance and mitigation of risk; assists in the completion of risk and compliance self-assessments and third-party risk and compliance assessments.Assists with the administration of information security and privacy training and awareness programs.*This position may include additional duties as assigned.Every application is reviewed to ensure that you meet the minimum qualifications as listed in the job ad. Please review our articles on Employment Applications and Minimum Qualifications and Verification of Experience and/or Education for considerations taken when reviewing applications.Education: An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university OR its equivalent in terms of total course credits/units (i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in one of the fields above or a closely-related field).Substitution: One year of experience in analyzing, installing, configuring, enhancing and/or maintaining the components of a system or platform may be substituted for the required degree.Completion of the 1010 Information Systems Trainee Program may be substituted for the required degree.Note: Any applicant whose application is deemed not qualified may reapply after 1 month upon successfully meeting the minimum qualifications for the given specialty area.Additional Department Specific Requirements Positions with the San Francisco Airport Transportation Security Administration (TSA) Security Clearance: Candidates for employment with the San Francisco Airport Commission are required to provide a complete employment history for the past ten (10) years and an explanation of all gaps in employment during that period. The past ten (10) years of the candidate's employment will be verified. In addition, candidates will be required to undergo a criminal history check, including FBI fingerprints, in order to determine eligibility for security clearance and may be required to undergo drug/alcohol screening.Customs Clearance: This position with the San Francisco Airport Commission requires that the incumbent be qualified for unescorted access to the San Francisco International Airport U.S. Customs Security Area. An application for a U.S. Custom Access Seal may be submitted to Customs ONLY after employment has commenced. Employment in this position requires that the incumbent submit an application for, successfully acquire and maintain a Customs Access Seal. Per Civil Service Commission Rule 110.9.1, every applicant must possess and maintain the qualifications required by law and by the examination announcement for this examination. Failure to acquire or maintain customs access, a requirement for this position, may be basis for termination from employment with the Airport Commission.Positions with the Sherriff's Department Security clearance issued by the Sheriff's Department is required prior to appointment of positions with Jail Health Services and must be maintained for continued employment. Failure to demonstrate/show proof of security clearance may result in dismissal and/or termination of employment.Positions with the Port Positions with the San Francisco Port Commission require that incumbents are able to obtain a Transportation Worker Identification Credential (TWIC) certificate as a condition of employment. Additionally, candidates must be insurable under the Port's automobile liability insurance policy. Insurability must be maintained throughout employment.Note: Falsifying one's education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.Selection Procedures Preliminary Questionnaire: Applicants are required to complete a Preliminary Questionnaire as part of the online application process. The purpose of the Preliminary Questionnaire is to allow candidates to self-certify their qualifications for the position.After application submission, candidates deemed qualified must complete all subsequent steps to advance in this selection process, which includes the following:Tech Engineer – Security Core Exam (Weight: 100%) Candidates self-certifying meeting the Minimum Qualifications will be invited to participate in the online Tech Engineer – Security Core Exam. Candidates will be sent a web link via email that will allow them to take the online Tech Engineer – Security Core Exam that is designed to measure basic analytical and technical abilities associated with the target job, which may include but not be limited to:Knowledge of security operations including concepts, investigations and incident managementKnowledge of security engineeringKnowledge of communication and network securityKnowledge of asset security operationsKnowledge of identity and access management including controlling access and managing identityKnowledge of mobile security including managing and securing mobile devices and softwareKnowledge of security assessment and testingThis computer-administered test can be taken at home or at a time and location of one's convenience, but only within a two week period specified on the test notification. Candidates must have access to a computer and reliable internet connection to participate in this exam. The test consists of 20 questions and it must be completed within 50 minutes. Questions are presented one at a time on the computer screen. There is no penalty for guessing. Candidates may not return to questions presented earlier in the exam; they can only move forward. A passing score must be attained on this test in order to continue further in the selection process. Test questions and answers are not available for public inspection or review.Note : A passing score must be achieved on all examination components in order to be placed on the Eligible List. The hiring department may administer additional position-specific procedures to make final hiring decisions. Achieving a passing score in one class does not guarantee placement on eligible lists for the other classes. You must apply to each class you would like to be considered. There are different exams for each of the SF Civic Tech specialty areas (Applications, Networks, Security and Systems), and each class (1041, 1042, 1043 and 1044) has a different passing score for each exam.Candidates' scores on the Tech Engineer – Security Core Exam may also be applied to other announcements involving other job titles, when directed by the Human Resources Director.Score Banking: Scores attained on the Tech Engineer – Security Core Exam will be 'banked' for three years, starting from the date of the examination. This means that, during this three-year time period, candidates need not take this test again. Rather, if another announcement you applied to and are deemed qualified for requires the Tech Engineer – Security Core Exam and is held within one year of your Tech Engineer – Security Core Exam date your score will be automatically applied to that announcement. However, after one year, a candidate has the option to either (a) apply his/her test score to the other announcement or (b) re-take the test. Re-testing is permitted no sooner than one year from the date of the test and only in association with a candidate's eligibility for another announcement to which the candidate has applied and is deemed qualified. If a candidate opts to re-