Lead Cybersecurity Engineer

Lead Security Administrator

The Lead Security Administrator position at the City of Tucson's Information Technology Department (ITD) drives the strategic implementation of cybersecurity initiatives for the Water Utility by leading technical projects, performing threat analyses, and adopting advanced security technologies. This position involves both hands-on technical work and mentoring junior staff, working closely with the cybersecurity team to meet strategic goals.

Work is performed under the supervision of the Chief Information Security Officer. This position leads and instructs the daily operational work of IT Security personnel.

Duties and Responsibilities

• Oversees daily cybersecurity operations for the Tucson Water Department including incident response, vulnerability management, and lifecycle management of security systems. Focuses on all areas of Tucson Water technology including Supervisory Control and Data Acquisition (SCADA), Industrial Control Systems (ICS), Operational Technology (OT), and Internet of Things (IoT). Ensures continuous improvement and optimization of security processes.
• Manages and implements strategic cybersecurity initiatives in alignment with the City's security objectives, ensuring timely and budget-compliant completion. Oversees cross-functional team collaborations, leading technical groups in project delivery, delegating responsibilities to junior staff, and maintaining strategic focus under the IT Security Manager's guidance. Guides and mentors junior colleagues within the cybersecurity team, leveraging technical expertise to assign tasks, and elevate the cybersecurity team's technical competencies.
• Utilizes sophisticated analytical tools to monitor, identify, and mitigate potential cyber threats, ensuring the city's defense mechanisms are proactive and robust. Stays informed on global cybersecurity trends and threats, translating this knowledge into actionable strategies for the City's cybersecurity efforts.
• Supports the Cybersecurity Team by contributing to the strategic development and implementation of cybersecurity measures, ensuring they are in line with the broader technological and security goals of the city. Drafts and refines comprehensive cybersecurity frameworks, focusing on robust and scalable solutions enhancing security posture.
• Performs compliance monitoring, documentation maintenance, and additional support tasks as needed to meet the cybersecurity team's objectives and assists the IT Security Manager in decision-making processes.
• Performs all other duties and tasks as assigned.

Working Conditions

Mostly office environment. On-call rotations and perform off-hours work as necessary.

All duties and responsibilities listed are subject to change.

Minimum Qualifications

Education: Bachelor's Degree

Experience: Four (4) years of relevant experience

Any combination of relevant education and experience may be substituted on a year-for-year basis.

A valid and unrestricted driver's license with two (2) years of licensed driving is required.

A master's degree in Computer Info Systems (CIS), Cybersecurity, IT, Management Info Systems (MIS), or related field.

Experience in Cisco, Microsoft, System Security Certification Consortium (ISC²) Systems Security Certified Practitioner (SSCP), SysAdmin, Audit, Network, and Security Institute (SANS) Global Information Assurance Certification (GIAC), Information Systems Audit and Control Association (ISACA) Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) and cloud certifications like Amazon Web Services (AWS) Certified Solutions Architect, Azure Solutions Architect Expert, or Google Cloud Architect are beneficial.

Experience in guiding daily operations and project tasks within a small team, following the strategic direction of the manager.

Experience in information security administration, including experience in policy, management, and technology.

Experience in fostering collaborative relationships across teams, promoting, and disseminating cybersecurity knowledge and initiatives.

Experience with Splunk for creating queries and dashboards, and expertise in managing large datasets.

Proficiency in vulnerability management solutions (e.g., Nessus, Tenable, Rapid7).

Experience in conducting cybersecurity investigations, including evidence gathering, log analysis, and threat hunting, to recommend effective actions.

Experience in developing and refining cybersecurity processes to enhance the security posture of the City of Tucson.