Career Opportunity

CYBERSECURITY IS ENGINEER (1042) SFPUC

Recruitment: RTF0129997-01153470

Published: March 29, 2023

Accepting applications until: April 05, 2023

Apply using SmartRecruiters, the City and County of San Francisco's application portal Learn More

About:

• Application Opening: January 6, 2023
• Application Filing Deadline: April 5, 2023 
• Annual Salary: $125,918 - $158,392
• Recruitment ID: 129998 (RTF0129997-01153470) 

2/6/2023 Update: Announcement has been reopened to broaden the applicant pool. Applicants who have applied will not need to reapply.

3/29/2023 Update: Announcement has been reopened to broaden the applicant pool. Applicants who have previously applied will need to reapply to be considered in the recruitment process.

APPOINTMENT TYPE: Temporary Exempt (TEX): This position is excluded by the Charter from the competitive Civil Service examination process and shall serve at the discretion of the Appointing Officer. The duration of the appointment shall not exceed 36 months.

WHO ARE WE?
San Francisco Public Utilities Commission (SFPUC)
Headquartered in San Francisco, we have 2,300 employees operating across eight counties serving more than 2.7 million customers in the San Francisco Bay Area – 24 hours per day, 365 days per year.

Our Mission: To provide our customers with high quality, efficient, and reliable water, power, and wastewater services in a manner that values environmental and community interests and sustains the resources entrusted to our care.
Our Vision: We are an innovative utility leader, recognized for excellent results in service, safety, stewardship, and inclusiveness.

We are an award-winning and industry-leading utilities organization committed to our customers, community interests, and the environment.  We value our highly qualified and dedicated workforce which ensures that this vision becomes a reality. To learn more about our organization, please visit our website at https://www.sfpuc.org/.

Role description

Project: Cybersecurity Operations

Under the general direction of the Chief Information Security Officer (CISO), this Cybersecurity Engineer - Journey will be focused on Security Operations aspects of the cybersecurity program. This Cybersecurity Engineer is responsible for operating cybersecurity solutions, threat intelligence, incident response, investigations, data request and legal hold orders for both the Information Technology (IT) and Operational Technology (OT) environments at the San Francisco Public Utilities Commission (SFPUC). 

In addition to cybersecurity technical knowledge, this role requires business acumen. Including the ability to collaborate internally Agencywide and within the larger Citywide cybersecurity ecosystem.

Essential Functions: 

• Manage the SFPUC suite technical cybersecurity solutions require to ensure alignment with the COIT (Committee on Information Technology), the City’s Office of Cybersecurity (DT), Office of Contract Administration (OCA) and Mayor’s Executive Directives on Cybersecurity, Data Governance and Privacy.
• Manage and operate the SFPUC cybersecurity threat intelligence program including the dissemination of actionable intelligence. 
• Coordinate and respond to Managed Cybersecurity Services Provider activities.
• Operate the SFPUC suite of technical cybersecurity solution to monitor, alert and respond to cybersecurity events and incidents in alignment with the SFPUC Cybersecurity Incident Response Plan, the Unified Cyber Command and Emergency Support Function 18.
• Facilitate and coordinate formal data requests in alignment with Public Records Requests and the Sunshine Ordinance. 
• Facilitate and coordinate formal legal hold orders on the behalf of the City Attorney’s Office.
• Perform other related duties as assigned.

How to qualify

• Education: An associate degree in computer science or a closely related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field].; AND
• Experience: One (1) year of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network.

Substitution:
Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/r forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field.

Applicants must meet the minimum qualification requirement by the final filing date unless otherwise noted.

Desirable Qualifications:

• Experience Cybersecurity Technology Solutions
• Cybersecurity Operations Experience
• Threat Intelligence Experience
• Knowledge and experience with Cybersecurity Standard Frameworks such as NIST SP 800-53, NIST SP 800-171 NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF) or ISO 27001/27002, CIS Top 18 Critical Controls, Compliance Experience with NERC-CIP, HIPPA or other Regulatory Requirements
• SCADA or Control System Cybersecurity Experience

The stated desirable qualifications may be considered at the end of the selection process when candidates are referred for hiring.

Verification of Education and Experience:
Applicants must meet the minimum qualification requirement by the final filing date unless otherwise noted.  Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment process. For education verification information, including verifying foreign education equivalency, click HERE. 

All work experience, education, training and other information substantiating how you meet the minimum qualifications must be included on your application by the filing deadline. Information submitted after the filing deadline will not be considered in determining whether you meet the minimum qualifications. Resumes will not be accepted in lieu of a completed City and County of San Francisco application.

Note: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.

What else should I know?

• Information About The Hiring Process
• Conviction History
• Employee Benefits Overview  
• Equal Employment Opportunity 
• Disaster Service Worker
• ADA Accommodation
• Right to Work
• Copies of Application Documents
• Diversity Statement

HOW TO APPLY

Applications for City and County of San Francisco jobs are only accepted through an online process. Visit https://careers.smartrecruiters.com/CityAndCountyOfSanFrancisco1/ and begin the application process.

• Select the “I’m Interested” button and follow instructions on the screen

Applicants may be contacted by email about this recruitment and, therefore, it is their responsibility to ensure that their registered email address is accurate and kept up-to-date. Also, applicants must ensure that email from CCSF is not blocked on their computer by a spam filter. To prevent blocking, applicants should set up their email to accept CCSF mail from the following addresses (@sfgov.org, @sfdpw.org, @sfport.com, @flysfo.com, @sfwater.org, @sfdph.org, @asianart.org, @sfmta.com, @sfpl.org, @dcyf.org, @first5sf.org, @famsf.org, @ccsf.edu, @smartalerts.info, and @smartrecruiters.com).

Applicants will receive a confirmation email that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received.

Job Analyst Information: If you have any questions regarding this recruitment or application process, please contact the job analyst, Crystal Liu, by email at Cliu@sfwater.org.

CONDITION OF EMPLOYMENT:  All City and County of San Francisco employees are required to be fully vaccinated against COVID-19 as a condition of employment. Someone is fully vaccinated when 14 days have passed since they received the final dose of a two-shot vaccine or a dose of a one-shot vaccine. Any new hire must present proof of full vaccination status to be appointed. Any new hire who will be routinely assigned or occasionally enter High-Risk Settings, must provide proof of having received a COVID-19 booster vaccine by March 1, 2022, or once eligible.

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.