SENIOR SECURITY ANALYST

Senior Security Analyst Department: Technology & Innovation, Division: Security Division Positions: 1 (additional vacancies may be added) Not in Career Service Starting Salary: $120,144.00 (new hires are paid the starting rate; current employees are paid per title and years of service) Location: 2 N. La Salle Street, Suite 1130 Days: Monday – Friday Hours: 8:00 AM – 4:00 PM (flexible) Responsibilities Assist in the implementation and operation of the City's Application Security (AppSec) Program. Manage and administrate Application Security tools including SAST, DAST, SCA and related security testing technologies. Coordinate onboarding of applications into the City's AppSec platform and maintain application inventories, scanning, and vulnerability remediations. Integrate security testing into CI/CD pipelines and software development workflows. Develop and maintain application security standards, procedures, secure coding guidelines, and vulnerability management processes. Monitor and utilize intrusion detection systems and security toolsets for the identification of suspicious and malicious activities and inadequate security practices across the City's network, such as analyzing network traffic, vulnerability scans, computer viruses, and unauthorized user activity that may compromise confidentiality, integrity, and availability. Analyze and monitor security violations, alerts, and reports, and act as a liaison regarding all reported vulnerabilities. Perform security risk assessments, audits, and tests against internal sites and systems. Analyze, coordinate, and manage threat intelligence data. Monitor the City's ongoing compliance with regulations, internal policies, standards, and procedures. Work closely with management and department leaders to ensure business operations requirements meet IT security and compliance practices and policies. Document and manage the City's support of identity and access management capabilities. Additional duties may be required for this position. Qualifications 5+ years experience: Information security, network architecture/engineering, application development, or IT auditing/compliance. Associate degree + 3 years experience: Computer Science, Cybersecurity, IT/Systems, or related field. Bachelor's degree + 1 year experience: Computer Science, Cybersecurity, IT/Systems, or related field. Preference for: professional IT security, firewall, and network certifications. Selection Requirements This position requires an interview. Candidates whose qualifications best fit the responsibilities will be selected. Equal Opportunity and Diversity The City of Chicago is an Equal Employment Opportunity, Military Friendly, and Fair Chance Employer. To further our commitment to hiring applicants with diverse experience, the City of Chicago has adopted ordinances 2-74-020 and 2-74-075, which provide preference for veterans, residents of Socio‑Economically Disadvantaged Areas (SEDA), and Chicago Public School graduates. These hiring preferences do not apply to bidders, as Collective Bargaining Agreements define the hiring process for bidders. #J-18808-Ljbffr Hispanic Alliance for Career Enhancement