Technology Engineer - (1042) - Security Specialty - Citywide (C00092)

Under direction, analyzes, plans, designs, implements, maintains, troubleshoots and enhances technology. Serves as the technical contributor for systems or platforms.

The 1042 Technology Engineer Associate is the journey level position in the Engineer series. The class is distinguished from the Senior level by the complexity of the systems or networks supported, and is more independent than the 1041 Technology Engineer – Associate level. This classification performs a wide range of complex analytical, design, planning, implementation, enhancement and problem resolution tasks on systems and platforms. It works within a framework of established procedures and interprets policies, procedures and guidelines. This level may formulate recommendations consistent with directives, policies, standards and regulations. Incumbents require only occasional instruction or assistance. Work is reviewed upon completion and for overall results.

The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement.

Supervision Exercised:

May provide direction to subordinate Engineer staff and other technical staff. May provide consultation and guidance to all other Technology job families. Such responsibilities are ancillary to the main intent and focus of the position.

Essential Duties:

1.     Implements, maintains and operates information system security and privacy controls and countermeasures.

2.    Validates and assists in the implementation of security and privacy controls and procedures in acquisition, development and change management lifecycle of information systems.

3.    Validates and assists in the implementation of security and privacy controls and procedures in business processes related to use of information systems and assets.

4.    Monitors information systems for security incidents, vulnerabilities, and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends.

5.    Responds to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement.

6.    Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets.

7.    Analyzes trends, news and changes in threat, compliance, and privacy regulatory environment with respect to organizational risk; executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments, and coordinates third-party risk and compliance assessments.

8.    Analyzes information security and privacy governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security, privacy, and use and operation of information systems.

9.    Administers, or provides advice and oversight, for information security and privacy training and awareness programs.

*This position may include additional duties as assigned.*