Lead Cyber Security Operations Analyst

This is highly responsible work in system and security administration across a variety of computer platforms and departments.

The Lead Cyber Security Operations Analyst plays a crucial role in safeguarding the integrity, confidentiality, and availability of sensitive information within the City of Tampa's digital infrastructure. As a key member of the Technology & Innovation Security Office, the incumbent will be responsible for designing, implementing, and maintaining robust security systems to protect against cyber threats, ensuring compliance with regulatory standards, and responding to security incidents. The Senior Security Systems Analyst will collaborate with various departments to assess security needs, recommend solutions, and contribute to the overall enhancement of the City of Tampa’s cybersecurity posture.

Participate in the planning and design of enterprise security architecture, under the direction of the Information Security Officer, where appropriate.

Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the Information Security Officer, where appropriate.

Participate in risk assessments for new technologies and projects.

Lead and direct secure configuration management processes.

Maintain up-to-date detailed knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.

Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.

Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.

Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).

Maintain operational configurations of all in-place security solutions as per the established baselines.

Monitor all in-place security solutions for efficient and appropriate operations.

Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.

Participate in investigations into problematic activity.

Participate in the design and execution of vulnerability assessments, penetration tests, security, and compliance audits.

Provide on-call support for end users for all in-place security solutions and security or operational related events.

Extensive knowledge of:  experience with Firewalls, SIEMs, EDRs, Threat Feeds. Security Frameworks (ISO27002, NIST Cybersecurity Framework).

Graduation from an accredited college or university with an bachelors degree in Computer Science or a related field, with at least three (3) years of experience in Security Architecture or Security Detection and Response;

Possession of a valid Florida Driver's License