Technology Engineer - Associate 1041 - Security Specialty - Citywide C00088 - City and County of San Francisco

Under general supervision, assists in analyzing, planning, implementing, maintaining, troubleshooting and enhancing technology. Serves as assistant technical contributor for systems or platforms.

The 1041 Technology Engineer Associate is the entry level in the Engineer series. The class is distinguished from the 1042 Technology Engineer by the complexity of the systems or networks supported. Positions at this level perform a significant portion of the work assigned to the journey level, but without the independence or full responsibility expected of positions at the journey level. Assignments are generally limited in scope and are set within procedural frameworks established by higher level positions. As experience accrues, the incumbent performs with increasing independence. Work requires incumbents to exercise some judgement in selecting appropriate established guidelines to follow. Significant deviations require prior approval. Interpretation of general administrative or operational policies is sometimes necessary.

The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement.

Supervision Exercised: None

Essential Duties: 1. Maintains and operates information system security and privacy controls and countermeasures. 2. Monitors and assists with the implementation of security and privacy controls and procedures in business processes related to use of information systems and assets. 3. Monitors information systems for security incidents, vulnerabilities, and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends. 4. Responds to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement. 5. Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets. 6. Monitors trends, news and changes in threat, compliance, and privacy regulatory environment with respect to organizational risk; assists in the execution of plans for compliance and mitigation of risk; assists in the completion of risk and compliance self-assessments and third-party risk and compliance assessments. 7. Assists with the administration of information security and privacy training and awareness programs.

*This position may include additional duties as assigned.*