Information Systems Security Specialist

The City of Las Cruces is hiring an Information Systems Security Specialist to protect the confidentiality and integrity of City information systems and data. The role monitors security and privacy programs, assesses systems and networks for vulnerabilities, manages security technologies, and reports risks and recommendations.

What you'll do:

• Identifies, investigates, and documents specific security issues and violations; conducts and performs assessments and audits of information technology systems and processes
• Prepares and presents various special and recurring reports; performs various evaluations and analysis on Information systems to identify security risks and report on recommendations and solutions
• Identifies, documents, tracks, and evaluates vulnerabilities and risks; determines tasks necessary to remediate issues identified; provides notification to management of security breaches or potential issues and recommends solutions in efforts to protect integrity of information and system security
• Reviews and evaluates placement and role of servers, network devices, and infrastructure; evaluates City needs and implements options for information systems; collaborates with various other departments to ensure that all information systems, servers, networks, and infrastructure are operational and effective
• Assesses configuration of systems and network devices and adherences to standards for controls; evaluates OS patch levels, system logging and monitoring controls, security of system configuration against defined security standards, account policies, user rights, file system and registry security, local and group security policies, network services configurations, IP addressing and routing, access control lists, traffic filtering rules, logging configurations, IPSEC, SSH, tunneling protocols, and VPNs
• Manages, configures, deploys, and maintains standard security systems, servers, and applications as directed and required to successfully collect and analyze network information services
• Participates, engages, and provides feedback and recommendations in various meetings; understands security needs to identify and communicate them effectively

What they're looking for:

• A sufficient combination of relevant education and job-related experience that has reasonably prepared the applicant to successfully perform the duties and responsibilities of the position, such as those listed above
• Work experience must include at least one (1) year of cumulative, paid work experience in an information security related role
• Applicant must demonstrate familiarity and capability with TCP/IP packet capture, trace, and analysis, and SMTP header analysis
• Valid driver's license is required
• Equivalent to an associate's degree in Computer Science, information systems management or related field AND one (1) year enterprise-level MS Windows systems administration experience in a multi-server, networked environment using MS exchange; one (1) year of which must be documented full-time experience in deployment and management of IT security technologies in an enterprise environment
• CompTIA Security + Certification, SANS GIAC (Global Information Assurance Certification), Microsoft Windows Security for workstations and servers, MCSA (Microsoft Certified Systems Administrator), Microsoft Windows Systems Hardening, CCNA-Security (Cisco Certified Network Associate Security), or Microsoft Certified System Engineer (MCSE), or other relevant certifications or licenses may be preferred