Salary Range: $71,299.02 - $103,383.80 Works under the direction of the Information Systems (IS) Security Manager in developing and implementing data access security controls and protective measures to ensure protection of computer data from unauthorized access from internal and/or external users. Researches, designs, and implements information security solutions for organization systems and products that comply with all applicable security policies and standards. Analyzes and makes recommendations to improve network, system, and application architectures. Examines network, server, and application logs to determine trends and identify security incidents. Assists in review and update of information security policies, architectures, and standards. Assists in responding to audits, penetration tests, and vulnerability assessments. Assists in planning, implementing, managing, monitoring, and upgrading security measures for the protection the City of Memphis’ organization data, systems, and networks. Monitors network security, including intrusion detection, webserver and wireless security. Applies technical expertise in applications including, VPN, Firewall, Multi-factor Authentication. Prepares various reports regarding security issues or concerns and recommends corrective action. OTHER FUNCTIONS - Performs additional functions (essential or otherwise) which may be assigned. TYPICAL PHYSICAL DEMANDS Must be able to communicate clearly both verbally and in writing with management and staff members at all levels. Requires the ability to operate general office equipment such as a computer, telephone, and wireless technology. TYPICAL WORKING CONDITIONS - Work is performed in an office environment. Occasional travel to meetings with divisional liaisons at locations across the City may be necessary. Bachelor’s degree in Information Technology, Information Systems, Information Security, or a closely related field and four (4) years professional experience in Information Security or Network Security, including Microsoft Office 365 Security, or any combination of experience and training which enables one to perform the essential job functions. Knowledge of Identity and Access Management, Linux, Endpoint Security, and Security Information and Event Management preferred. Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA) or similar information security certification preferred.