Job Details

Company Description

San Francisco is a vibrant and dynamic city, on the forefront of economic growth & innovation, urban development, arts & entertainment, as well as social issues & change. This rich tapestry of culture and ideas is sustained by our City's commitment to heighten the quality of life for the diverse population of San Franciscans and residents of the greater Bay Area. Our employees play an important role not only in making our City what it is today, but also in shaping the future of San Francisco.

Application Opening: 5/25/2022
Application Reposted: 11/06/2023*
*Announcement reposted to reflect changes in the minimum qualifications.
Application Deadline: Continuous

How to Apply:
Applications for Journey Information Systems Engineer - Security Specialty are only accepted through an online process. Visit to begin the application process. Select “Apply Now” at the top of the job ad and follow instructions on the screen.

Applicants may be contacted by email about this announcement and, therefore, it is their responsibility to ensure that their registered email address is accurate and kept up-to-date. Also, applicants must ensure that email from CCSF is not blocked on their computer by a spam filter.

Job Description

Under general supervision, assists in analyzing, planning, implementing, maintaining, troubleshooting and enhancing large complex systems or networks consisting of a combination that may include mainframes, mini-computers, personal computers, mobile devices, LANS, WANs, servers, data storage and the physical and logical components that integrate these systems together as an enterprise networking backbone.

The 1042 Security Engineer is the journey level position in the Engineer series. The class is distinguished from the Senior level by the complexity of the tasks, projects or duties assigned, and is more independent than the Assistant level. This classification performs a wide range of complex analytical, design, planning, implementation, enhancement and problem resolution tasks on large complex systems and networks. Works within a framework of established procedures and interprets policies, procedures and guidelines. This level may formulate recommendations consistent with directives, policies, standards and regulations. Incumbents require only occasional instruction or assistance. Work is reviewed upon completion and for overall results. Serves as a technical architect and systems integrator for large complex systems or networks, with a focus on securing vulnerabilities and reducing risk of system and/or asset compromises.

Essential Duties:

1. Implements, maintains and operates information system security controls and countermeasures.
2. Validates and assists in the implementation of security controls and procedures in acquisition, development and change management lifecycle of information systems.
3. Validates and assists in the implementation of security controls and procedures in business processes related to use of information systems and assets.
4. Monitors information systems for security incidents and vulnerabilities; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends.
5. Responds to information system security incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement.
6. Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets.
7. Analyzes trends, news and changes in threat and compliance environment with respect to organizational risk; executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments, and coordinates third-party risk and compliance assessments.
8. Analyzes information security governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security and use and operation of information systems.
9. Administers, or provides advice and oversight, for information security training and awareness programs.

*This position may include additional duties as assigned.*

Qualifications

These minimum qualifications establish the education, training, experience, special skills and/or license(s) which are required for employment in the classification.

Education: An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in one of the fields above or a closely-related field].

Experience: One (1) year of experience analyzing, installing, configuring, enhancing and/or maintaining the components of an enterprise network.

Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units or forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in one of the fields above or a closely-related field. Completion of the 1010 Information Systems Trainee Program may be substituted for the required degree.

Verification: Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process.

Note: Any applicant whose application is deemed not qualified may reapply after 1 month upon successfully meeting the minimum qualifications for the given specialty area.

Note: Falsifying one's education, training or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.

Additional Department Specific Requirements

Positions with the San Francisco Airport Transportation Security Administration (TSA) Security Clearance: Candidates for employment with the San Francisco Airport Commission are required to provide a complete employment history for the past ten (10) years and an explanation of all gaps in employment during that period. The past ten (10) years of the candidate's employment will be verified.

Positions with the Sherriff's Department Security clearance issued by the Sheriff's Department is required prior to appointment of positions with Jail Health Services and must be maintained for continued employment.

Positions with the Port Positions with the San Francisco Port Commission require that incumbents are able to obtain a Transportation Worker Identification Credential (TWIC) certificate as a condition of employment.

Additional Information

Supplemental Questionnaire: Applicants are required to complete a Supplemental Questionnaire as part of the online application process. The purpose of the Supplemental Questionnaire is to allow candidates to self-certify their qualifications for the position. Applicants must also complete the official application.

Tech Engineer – Security Core Exam (Weight: 100%) Candidates self-certifying meeting the Minimum Qualifications will be invited to participate in the online Tech Engineer – Security Core Exam.

Eligible List/Score Report: A confidential eligible list of applicant names that have passed the civil service examination process will be created, and used for certification purposes only.

Additional Information Regarding Employment with the City and County of San Francisco

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.