Specialist - Cybersecurity Job at Arlington Independent School District in Arlin

ROLE AND PURPOSE: Ensure the security of applications, services, information, and network infrastructure across the enterprise. This individual will interact closely with internal and external stakeholders such as software developers, IT administrators and technicians, risk and compliance staff, teachers, students, etc. to build and advance information and network security strategies and programs; and identify and remediate information security issues.

QUALIFICATIONS:            

Education/Certification:

• Bachelor's degree from an accredited institution (required)
• Degree in Information Technology, Computer Science or a related field (preferred)
• Minimum of four (4) years of experience in a similar role may substitute in lieu of degree. This experience would be in addition to the experience requirements identified below.
• Relevant industry certifications such as CCNA Security, CompTIA Security+, CompTIA CySA+, CEH, CISSP, CISM, CISA, NCSF, etc. (preferred)

Experience:    

• Minimum of four (4) years in a position requiring the use of knowledge and skills that relate to the major responsibilities and duties listed below.

MAJOR RESPONSIBILITIES AND DUTIES:  

SCHOOL/ORGANIZATION CLIMATE

• Promote and maintain open and effective communication
• Promote and maintain positive morale among department, district, and campus employees
• Protect confidentiality of records and information gained as part of exercising professional duties and use discretion when sharing any such information within legal confines
• Provide excellent customer service on the phone, in person, and through written communication, ensuring all incidents, requests, inquiries, and/or tasks are responded to in a timely and professional manner, according to established Service Level Agreement (SLA)
• Display ethical and professional behavior while working with district personnel, students, parents, and outside agencies associated with the district
• Model behavior that aligns with organizational culture and climate expectations
• Demonstrate a positive attitude and the ability to work as a member of a team
• Self-motivated and works effectively under minimal supervision
• Visit campuses as needed to diagnose, troubleshoot, and provide consultation for network security related matters. This includes incident-related and pro-active review visits.
• Visit campuses to provide appropriate campus personnel with network security-related information

SCHOOL/ORGANIZATIONAL IMPROVEMENT

• Maintain and manage a variety of security products including, but not limited to:
  • Firewalls
  • Network and host-based IDS/IPS
  • SIEM software
  • Vulnerability Management software
  • E-mail and web security gateways
  • Cyber Security awareness training software
  • EDR
  • DLP
• Knowledge of regulatory compliance requirements for:
  • FERPA
  • COPPA
  • NIST and CIS Controls
• Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards
• Oversee configuration management of assigned systems to ensure posture integrity
• Participate in assessment and test/analysis data to document state of compliance with security requirements
• Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
• Conduct periodic hardware/software inventory assessments
• Manage and perform security compliance continuous monitoring
• Participates in security assessments and audits
• Prepares, reviews, and presents technical reports and briefings
• Identifies root causes, prioritizes threats, and recommends and/or implements corrective action
• Participates in development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple stakeholder groups
• Categorize and prioritize incidents, requests, inquiries, and tasks according to SLA and other IT protocols
• Demonstrate knowledge with security relevant tools, systems, and applications
• Participate in department & district planning to ensure the effective use of all technologies being implemented in the school district
• Work with other AISD departments and campus personnel to resolve issues with related system problems/issues

SCHOOL/COMMUNITY RELATIONS

• Assist leadership in responding to community concerns or questions related to the district network

PROFESSIONAL GROWTH AND DEVELOPMENT

• Explores the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices
• Create and maintain support documentation within the knowledge base concerning software and systems that support the goals of the department and district
• Perform knowledge transfer sessions with team members as needed
• Participate in appropriate training, in-service and workshop programs, and attend any required meetings

MISCELLANEOUS

• Experience using scripting languages to create, modify, and debug, and for administration and automation of tasks.
• In-depth knowledge, experience and deep understanding of: Active Directory (AD) Attributes, LDAP queries, PowerShell scripting, Group Policies, and workstation configuration.
• Experience documenting system architecture and design using a variety of tools such as Microsoft Visio, etc.
• Experience designing and participating in Disaster Recovery and Information Security design planning and implementation efforts
• Prepare documentation on applications, system procedures, processes, and best practices for review and distribution to district staff as needed
• Continually look for ways to improve processes and procedures that result in increased efficiency
• Report to supervisor to provide support and recommendations for identified issues, projects, and initiatives
• Demonstrates the ability to manage multiple tasks, work with all levels of technical ability and effectively collaborating with all stakeholders as needed
• Demonstrates the ability to read and interpret data
• Communicates effectively with all stakeholders
• Exercises discretion regarding matters of sensitive or confidential nature
• Exercises proper judgement and creativity in making decisions
• Perform other job-related duties as assigned
• Participate in an on-call rotation providing after-hours, weekend, and/or holiday support
• Occasionally work prolonged and/or irregular hours, with little to no advance notice, in order to ensure/restore department and/or district operations

Occasionally (0-33% of day, 0-32 repetitions)

Frequently (34-66% of day, 33-200 repetitions)

Constantly (67-100% of day, >200+ repetitions)

WORKING/ENVIRONMENTAL CONDITIONS:

While performing the duties of this job, the employee is regularly required to talk or hear. The employee is frequently required to walk; sit; lift, stand, bend, use hands for fine manipulation, handle or feel and reach with hands and arms using a keyboard and video display terminal. The employee is occasionally required to stand and stoop, kneel, or crouch. The employee must maintain emotional control under stress. The employee must occasionally lift and/or move up to 35 pounds. Specific vision abilities required by this job include close vision. The work environment is a standard office setting including standard office equipment (fax, copier, phone, computer, 10-key, etc.). The noise level in the work environment is usually low to moderate.