Technology Engineer - (1042) - Security Specialty - Citywide (C00092)

THIS IS A CITYWIDE EXAM San Francisco is a vibrant and dynamic city, on the forefront of economic growth & innovation, urban development, arts & entertainment, as well as social issues & change. This rich tapestry of culture and ideas is sustained by our City's commitment to heighten the quality of life for the diverse population of San Franciscans and residents of the greater Bay Area. Our employees play an important role not only in making our City what it is today, but also in shaping the future of San Francisco. Specific information regarding this recruitment process is listed below. Application Opening:  5/25/2022 Application Reposted:  11/06/2023 - Announcement reposted to reflect changes in the minimum qualifications. Application Reposted:  6/24/2026 - The announcement has been reposted to incorporate updates to the class specification. These updates include a job title change, from IS Engineer - Journey to Technology Engineer and revisions to the minimum qualifications. Application Deadline:  Continuous Under direction, analyzes, plans, designs, implements, maintains, troubleshoots and enhances technology. Serves as the technical contributor for systems or platforms. The 1042 Technology Engineer Associate is the journey level position in the Engineer series.  The class is distinguished from the Senior level by the complexity of the systems or networks supported, and is more independent than the 1041 Technology Engineer – Associate level. This classification performs a wide range of complex analytical, design, planning, implementation, enhancement and problem resolution tasks on systems and platforms. It works within a framework of established procedures and interprets policies, procedures and guidelines. This level may formulate recommendations consistent with directives, policies, standards and regulations. Incumbents require only occasional instruction or assistance. Work is reviewed upon completion and for overall results. The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement. Supervision Exercised: May provide direction to subordinate Engineer staff and other technical staff. May provide consultation and guidance to all other Technology job families. Such responsibilities are ancillary to the main intent and focus of the position. Essential Duties: 1.     Implements, maintains and operates information system security and privacy controls and countermeasures. 2.    Validates and assists in the implementation of security and privacy controls and procedures in acquisition, development and change management lifecycle of information systems. 3.    Validates and assists in the implementation of security and privacy controls and procedures in business processes related to use of information systems and assets. 4.    Monitors information systems for security incidents, vulnerabilities, and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends. 5.    Responds to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts with third-party incident responders, including law enforcement. 6.    Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets. 7.    Analyzes trends, news and changes in threat, compliance, and privacy regulatory environment with respect to organizational risk; executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments, and coordinates third-party risk and compliance assessments. 8.    Analyzes information security and privacy governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security, privacy, and use and operation of information systems. 9.    Administers, or provides advice and oversight, for information security and privacy training and awareness programs. *This position may include additional duties as assigned.* Every application is reviewed to ensure that you meet the minimum qualifications as listed in the job ad. Please review our articles on  Employment Applications and Minimum Qualifications  and  Verification of Experience and/or Education  for considerations taken when reviewing applications.  Education : An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in one of the fields above or a closely-related field]. Experience : One (1) year of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of a system or platform. Substitution : One year of additional experience as described above may be substituted for the required degree. Completion of the 1010 Information Systems Trainee Program may be substituted for the required degree. Note : Any applicant whose application is deemed not qualified may reapply after 1 month upon successfully meeting the minimum qualifications for the given specialty area. Additional Department Specific Requirements Positions with the San Francisco Airport Transportation Security Administration (TSA) Security Clearance:  Candidates for employment with the San Francisco Airport Commission are required to provide a complete employment history f