Cyber Security Engineer II

SALARY DETAILS

APPLICATION FILING DATES

Open Until Filled

INFORMATION ABOUT LAUSD

We are LAUSD. We are at the forefront of innovation in public education, focused on a clear and inspiring vision of the future for all of our students as they venture forward on their journey as lifelong learners. Here, you will have the opportunity to exercise your potential in a role supporting the business of education. Our work directly contributes toward the goal of ensuring that our students graduate ready for the world – ready to thrive in college, career and life. LAUSD is the second largest school district in the nation with an enrollment of nearly 575,000 students. We serve an area totaling 710 square miles, with over 1,190 schools and educational centers, and we employ over 74,000 individuals, making us one of the largest employers in our city.

LAUSD Employees: Please be advised that all LAUSD employees must sign in to the GlobalProtect Virtual Private Network (VPN) in order to submit an application from an external network outside of an LAUSD location. For assistance with installing the GlobalProtect virtual network, please contact Information Technology Services at (213) 443-1300 or (213) 241-5200.

DEPARTMENT OR SCHOOL SITE

The District has 600+ staff members, including programmers, network engineers, and administrative staff - all of whom provide support to the Schools and most District offices in a professional, forward thinking, and challenging environment. Technologies supported range from personal systems to enterprise-wide systems and applications.

PROJECT

In LAUSD's Information Technology Services, a Cyber Security Engineer II configures, evaluates, operates and maintains a variety of security controls and tools to perform complex Cyber Security operational tasks including developing and evaluating approaches to solving Cyber Security challenges.

BENEFITS

Insurance: Paid premiums for your choice of several medical, dental, vision, and life insurance plans.

Retirement: Membership in the California Public Employee Retirement System (CalPERS).

Vacation: Two weeks of paid vacation to start. Three weeks after five years of year-round paid service. 

Paid Holidays: Up to 13 days.

JOB DUTIES/RESPONSIBILITIES

The following list includes the essential job duties/responsibilities of this classification: 
- Evaluates and participates in the development of requirements for network and security technologies and devices to ensure the requirements are adequate for the District.
- Performs network security device and appliance testing, implementation, and maintenance via installation, upgrades, patches, and updates with appropriate security controls such as authentication and configuration.
- Collaborates with various IT units in the District’s vulnerability management program by performing technical scans, highlighting vulnerabilities and providing remediation to reduce risk.
- Assesses security threats posed by changes in systems architecture and dependencies.
- Collaborates with higher level engineers in the review of security architecture to identify gaps or deficiencies within the District’s network in order resolve issues or find solutions.
- Validates and configures Domain Name Server (DNS) requests by creating internal and external A records, internal and external C name aliases, and creating external TXT records.
- Analyzes and corrects security-related connectivity issues utilizing network management systems.
- Configures firewalls by creating and maintaining access list rules, creating object groups and
processing network addressing translation requests to maintain access control.
- Configures the District’s web access filter by processing requests on dashboard to ensure the functionality of the system and review dashboard for actionable items.
- Fulfills Virtual Private Network (VPN) requests by adding new users to active directory VPN groups, maintaining and configuring access lists, adding IP addresses to access list, assign software token for password generation, and review authentication logs and troubleshoot access issues. 
- Recommends security solutions or enhancements to existing security solutions to improve overall
enterprise security.
- Collaborates with higher level engineers in the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions.
- Researches IT security issues and industry trends to make recommendations for internal improvement.
- Performs related duties as assigned

MINIMUM REQUIREMENTS

Education:
Graduation from a recognized college or university with a bachelor’s degree in computer science or a related field. Qualifying experience in addition to that required may be substituted on a year-for-year basis provided that the requirement of a high school diploma or equivalent is met.

Experience:
Four years of recent experience in the engineering, installation, configuration, and maintenance of security devices for a large organization; such as next-generation firewalls, Virtual Private Networks, intrusion detection/prevention systems, multi-factor authentication, next-generation endpoint security, and Security Information Event Management systems.

Special:
Cisco Certified Network Professional (CCNP) Security, Cisco Certified CyberOps Professional or equivalent is required and must be kept valid during the term of employment
Any Global Information Assurance Certification GIAC certification is preferred
Information Technology Infrastructure Library (ITIL) Foundation level certification is preferable
A valid driver’s license to legally operate a motor vehicle in the state of California and the use of a motor vehicle.

DESIRABLE QUALIFICATIONS

The ideal candidate would have the knowledge of:
- Current firewall, VPN, content filtering, and intrusion detection methodologies
- TCP/IP protocols including IP addressing, subnetting and well known ports
- Knowledge of security tools such as IDS/IPS, SIEM, DLP
- Knowledge of vulnerability assessment tools including but not limited to Nessus, Nmap and Metasploit
- Risk and threat assessment processes and practices
- Malware such as worms, viruses and Trojans
- Proof of Concepts procedures and processes
- Project management techniques

The ideal candidate would also have the ability to:
- Install, configure and monitor network security devices, including firewalls, VPN, content filtering, and Intrusion Detection Systems
- Design and implement technical modifications to firewall, VPN, content filtering, and intrusion detection rule sets
- Learn characteristics of new security threats, vulnerabilities, and countermeasure techniques and technology
- Effectively communicate technical information to all levels of staff
- Maintain effective working relationships
- Identify and analyze trends related to threats
- Conduct WireShark captures
- Train and mentor staff effectively
- Maintain up-to-date detailed knowledge of the IT Security industry including awareness of new or revised security solutions, improved security processes, and the deployment of new attacks and threat vectors

EMPLOYMENT SELECTION PROCESS

The selection process for this position may tentatively consist of the following: Technical Project and/or Technical Interview.

Please be sure to include correspondence from @lausd.net as an approved sender so that messages aren't accidentally placed into your spam/junk e-mail folder.

We anticipate receiving a number of well qualified applicants for this position; therefore, there will be a competitive process. The hiring departments have requested that we proceed with the selection process in an expeditious and timely manner. To honor this request we will be adhering to a pre-planned employment assessment schedule. 

For more information about the LAUSD employment assessment process, visit the 'My LAUSD Career' section of our website at http://www.lausdjobs.org.

APPLICATION PROCESS

DO YOU NEED TECHNICAL ASSISTANCE WITH THE ON-LINE APPLICATION?

Email us at helpmeapply@lausd.net

To find out whether the application deadline has been extended, visit the website at: http://www.lausdjobs.org.

The Los Angeles Unified School District intends that all qualified persons shall have equal opportunities for employment and promotion. Reasonable accommodations in completing an application and testing are available to individuals with disabilities. Please call (213) 241-3455 for more information.

ADDITIONAL POSTING INFORMATION

Selection and promotion are based on a competitive employment assessment process. Candidates who pass all parts of the assessment process are placed on a hiring (eligibility) list based on their assessment score. Hiring departments may make job offers to candidates on the top three ranks of the hiring list. Eligibility typically lasts for 12 months. The hiring list resulting from this assessment process may be used to fill open positions in related job classifications.

The Los Angeles Unified School District is committed to providing a working and learning environment free from discrimination, harassment, intimidation, abusive conduct, or bullying. The District prohibits discrimination, harassment, intimidation, abusive conduct or bullying based on actual or perceived race or ethnicity, gender/sex (including gender identity, gender expression, pregnancy, childbirth, breastfeeding/lactation status and related medical conditions), sexual orientation, religion, color, national origin (including language use restrictions and possession of a driver’s license issued under Vehicle Code), ancestry, immigration status, physical or mental disability (including clinical depression and bipolar disorder, HIV/AIDS, hepatitis, epilepsy, seizure disorder, diabetes, multiple sclerosis, and heart disease), medical condition (cancer related and genetic characteristics), military and veteran status, marital status, registered domestic partner status, age (40 and above), genetic information, political belief or affiliation (unless union related), a person's association with a person or group with one or more of these actual or perceived characteristics, or any other basis protected by federal, state or local law, ordinance, or regulation in any program or activity it conducts or to which it provides significant assistance.

For inquiries or complaints contact our Equal Opportunity Section, (213) 241-7685.

Selection and promotion are based on a competitive employment assessment process. Candidates who pass all parts of the assessment process are placed on a hiring (eligibility) list based on their assessment score. Hiring departments may make job offers to candidates on the top three ranks of the hiring list. Eligibility typically lasts for 12 months. The hiring list resulting from this assessment process may be used to fill open positions in related job classifications.

Follow us on:

https://twitter.com/lausdjobs

https://www.facebook.com/LAUSDjobs/

https://www.linkedin.com/groups/1997274

https://www.instagram.com/lausdjobs/