Description:

JOB ANNOUNCEMENT

Senior Cloud Security Engineer

Department of Technology and Innovation

Number of Positions: 1

(Additional vacancies possible pending budget approval)

Starting Salary: $127,584.00 (starting salary is non-negotiable)

Applications for this position will be accepted until 11:59pm CDT on 9/23/2024.

The City of Chicago’s Department of Technology and Innovation is seeking a Senior Cloud Security Engineer to join the City’s Information Security Office team. The successful candidate will join the Cybersecurity Operations function on the Information Security Office team helping deliver analysis of and security solutions for cloud-based environments.

Under supervision, primarily responsible for building and maintaining a cloud environment for hosting security tools and for maintaining the cloud security tools that are used to secure cloud environments. Protects City of Chicago systems against advanced persistent threats by defending against hacking, malware, and ransomware, and cybercrime. Also involved in tool management, scripting, log analysis, controls design, threat analysis, and incident response.

This class is assigned to the Engineer Information Technology Job Family which consists of engineers and developers that design, build, test, deploy, and support IT products and solutions.

ESSENTIAL DUTIES

• Designs, analyzes, implements, and supports secure network solutions, routers, firewalls, application development environments and operating systems specific to cloud environments.

• Develops secure systems and performs assessments and penetration testing.

• Manages security technology and audit/intrusion systems and develops secure network solutions to protect against persistent threats.

• Provides technical support for routine security services and participates in 24/7 on-call rotations.

• Verifies security systems by developing and implementing test scripts and running security scans.

• Validates baseline security configurations for cloud environments.

• Works with developers to respond to escalated problems from Technical Administrators or other Engineers.

• Partners with stakeholders to keep them informed about security problems and resolutions.

• Maintains City of Chicago’s IT standards across systems security

• Responds to cybersecurity incidents, participates in penetration and vulnerability testing, cybersecurity audits, and assists with remediation of cybersecurity vulnerabilities.

• Recognizes that telemetry for security products will increasingly be curated in the cloud and be prepared to develop API endpoints and connections to collect and collate this knowledge.

• Assess and propose solutions regarding cloud security to Information Security Office leadership.

• Perform architectural and design reviews through the security lens leveraging policy and best practices providing timely, actionable requirements and recommendations.

• Remain current on cloud technologies and best practices to secure them.

Additional duties may be required for this position.

Location: 2 N. LaSalle Street Chicago, IL 60602

Days: Monday-Friday

Hours: 8:00 am – 4:00 pm (Flexible)

THIS POSITION IS NOT IN CAREER SERVICE.

Qualifications:

MINIMUM QUALFICATIONS

Graduation from an accredited college or university with a Bachelor’s in Computer Science, Cybersecurity, Information Systems or a directly related field, plus four (4) years’ experience securing cloud environments, or an equivalent combination of education, training, and experience.

Licensure, Certification, or Other Qualifications

· Preference may be given to applicants who hold one or more applicable licenses or certifications such as: AWS Certified Solutions Architect – Associate, Microsoft Certified: Azure Solutions Architect Expert, Certified Cloud Security Professional (CCSP) or Google Professional Cloud Security Engineer.

· Preference may be given to applicants who hold one or more applicable licenses or certifications such as: CompTIA: Security+, GIAC Certification: GCWN, GSEC, ISC2: CISSP, SSCP, CCSP, Cloud Security Alliance: CCSK.

Knowledge, Skills, Abilities, and other work requirements

Considerable knowledge of:

• *Information security principles and an understanding of the Cyber Kill Chain, MITRE ATT&CK, Zero Trust and other security defense and intelligence frameworks

• *IT/Security infrastructure

• *Amazon Web Services, Azure, Google Cloud Platform

• *Native and third-party cloud security tools (e.g., AWS Security Hub, Azure Security Centre) leading coding, networking and network security, threat modeling, and testing skills Moderate knowledge of:

common controls used in frameworks such as NIST CSF,NIST 800-53, NIST 800-171 and ISO 27001 / 27002

• SAST/DAST and SDLC frameworks

• Identity and Access Management (IAM)

• Knowledge of applicable City and department policies, procedures, rules, and regulations

SELECTION REQUIREMENTS

This position requires applicants to complete an interview. The interviewed candidate(s) possessing the qualifications best suited to fulfill the responsibilities of the position will be selected.

APPLICATION EVALUATION: Initial evaluation will be based on information provided on the application and the documents submitted. Department of Human Resource staff will review applications after the final posting date. Staff will follow any and all required Employment/Hiring Plan provisions, federal, state and local laws, and Collective Bargaining Agreements when applicable. Staff will apply hiring preferences as required by the municipal code. Placement on an eligibility list is not an offer or guarantee of an interview nor employment with the City of Chicago.

COMMITMENT TO DIVERSITY: To further our commitment to hiring applicants with diverse experience the City of Chicago has adopted the following ordinances 2-74-020 and 2-74-075. The ordinances provide a preference to applicants who meet minimum qualifications and who are veterans of the Armed Forces, and/or residents of Socio-Economically Disadvantaged Areas (SEDA) and/or Chicago Public School (CPS) high school graduates to be referred to departments for consideration. These hiring preferences do not apply to bidders, as Collective Bargaining Agreements define the hiring process for bidders. For positions covered by a collective bargaining agreement, bidders will be considered before external candidates. To learn more about our hiring practices click here. (https://www.chicago.gov/city/en/depts/dhr/provdrs/emp.html)

ALL REFERENCES TO POLITICAL SPONSORSHIP OR RECOMMENDATION MUST BE OMITTED FROM ALL APPLICATION MATERIALS SUBMITTED FOR CITY EMPLOYMENT.

The City of Chicago in an Equal Employment Opportunity and Military Friendly Employer.

City of Chicago

Brandon Johnson, Mayor