Cybersecurity Engineer (Onsite)

Required Technical Knowledge

• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Identity and Access Management (IAM)
• Threat Intelligence Platform (TIP)
• Vulnerability Management
• Patch Management
• Security Operations Center (SOC)
• Incident Response
• Threat Hunting
• Threat Intelligence Analysis
• Remote Monitoring and Management (RMM)
• Cybersecurity Training and Awareness
• Phishing Testing
• Dark Web Monitoring
• Security Reporting and Analytics
• Cloud-Based Security Tools
• Security Tool Integration and Configuration

Compliance Frameworks

• NIST Cybersecurity Framework (CSF)
• ISO/IEC 27001
• General Data Protection Regulation (GDPR), where applicable
• Center for Internet Security (CIS) Controls v8.1 (IG1 and IG2)

Service Responsibilities

• Continuous monitoring and management of security tools.
• Regular updates and maintenance.
• Proactive threat detection and mitigation.
• Collaboration with the City IT Department.
• Incident reporting and response.
• Security policy and procedure collaboration.
• Preparation and submission of required documentation.