Cybersecurity Analyst

The City of Bozeman is now accepting applications for a Cybersecurity Analyst to protect the City's critical technology infrastructure and help safeguard the services our community depends on. As a Cybersecurity Analyst, you will monitor and respond to cybersecurity threats, strengthen system defenses, support incident response, and collaborate across departments to ensure the confidentiality, integrity, and availability of municipal systems and data.

This is your opportunity to make a meaningful difference in your community by joining the City of  Bozeman! You will be part of a passionate team driving positive change while enjoying a fantastic benefits package. Full-time City of Bozeman employees receive top-tier benefits including 15 vacation days, 12 sick days, 12 holidays, 8 weeks of paid parental leave, bilingual pay, excellent retirement options, comprehensive health, dental, and vision plans, discounted ski tickets and gym memberships, and much more!

Bargaining Unit: Non-Represented
Fair Labor Standards Act Status: Exempt
Work Week: Typically Monday - Friday, 8:00am - 5:00pm with occasional after-hours and emergency response.
Start Date: Immediate upon successful completion of background screening.

Examples of Essential Work (Illustrative Only)

• Monitors, analyzes, and responds to cybersecurity threats, alerts, vulnerabilities, and suspicious activity across municipal networks, systems, and applications.
• Assists with the Administration and   maintenance of cybersecurity technologies including firewalls, endpoint protection platforms, multi-factor authentication systems, intrusion detection/prevention systems, and email security tools.
• Conducts security audits, vulnerability assessments, risk analyses, and system testing to identify and mitigate cybersecurity risks and ensure compliance with established security standards and best practices.
• Investigates cybersecurity incidents, coordinate incident response activities, document findings, and assist in remediation and recovery efforts.
• Assists in developing, implementing, and maintaining cybersecurity policies, procedures, standards, and disaster recovery/business continuity plans.
• Monitors system and network activity to identify unauthorized access attempts, malware activity, phishing attacks, and other potential security threats.
• Coordinates and implements security updates, patches, and system hardening measures for servers, workstations, cloud environments, and network infrastructure.
• Collaborates with Information Technology staff, vendors, and department personnel to ensure cybersecurity measures are integrated into municipal systems, projects, and operations.
• Provides cybersecurity awareness training and guidance to employees regarding phishing prevention, password security, data protection, and safe technology practices.
• Maintains documentation related to cybersecurity incidents, configurations, risk assessments, security controls, and compliance activities.
• Supports regulatory compliance efforts for applicable governmental or industry security requirements.
• Participates in disaster recovery exercises, continuity planning efforts, and emergency response activities related to cybersecurity or technology disruptions.
• Researches emerging cybersecurity threats, trends, vulnerabilities, and technologies and recommend improvements to strengthen the municipality’s security posture.
• Responds to after-hours cybersecurity incidents, emergencies, or critical system outages as required.
• Keeps immediate supervisor and designated others fully and accurately informed concerning work progress, including present and potential work problems and suggestions for new or improved ways of addressing such problems.
• Conveys complex issues, in succinct, easy-to-understand language, both orally and in writing.
• Keeps immediate supervisor and designated others fully and accurately informed concerning work progress, including present and potential work problems and suggestions for new or improved ways of addressing such problems.
• Communicates with all related personnel in efforts to encourage, motivate, promote leadership, and encourage teamwork in accomplishing set forth objectives.
• Operates modern office machines and equipment including personal computers, printers, copiers, calculators, and fax machines; routinely uses a full range of word processing and spreadsheet computer software applications.
• Provides needed information and demonstrations concerning how to perform certain work tasks to new employees.  
• Responds to citizens’ questions and comments in a courteous and timely manner.
• As assigned, attends and participates in staff meetings and related activities; attends workshops, conferences, and classes to increase professional knowledge.
• Communicates and coordinates regularly with appropriate others to maximize the effectiveness and efficiency of interdepartmental operations and activities.
• Performs other duties consistent with the role and function of this classification.

• Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Network Administration, or related field, and
• At least 3 years of experience in cybersecurity, network security, systems administration, information security, information technology, or related experience, or
• Any equivalent combination of experience and training which provides the knowledge, skills and abilities necessary to perform the work.

• Valid Montana Class D Driver’s License or ability within 60 days.
• Ability to acquire Criminal Justice Information Network (CJIN)/National Crime Information Center (NCIC) Certifications within 180 days of employment.

• Comprehensive knowledge of principles, practices, and methodologies to cybersecurity, information security, and risk management.
• Comprehensive knowledge of cybersecurity tools and technologies including firewalls, endpoint detection and response (EDR), intrusion detection and prevention systems, vulnerability scanning tools, encryption technologies, and multi-factor systems.
• Knowledge of desktop, server, and network architectures used in public-sector IT environments.
• Knowledge of regulatory and compliance requirements related to public safety data security.
• Ability to communicate technical cybersecurity concepts effectively to technical staff, leadership, and non-technical users.
• Ability to maintain and exhibit integrity and discretion in handling confidential information.
• Ability to exercise sound judgement and maintain composure during cybersecurity incidents, emergencies, or operational disruptions.
• Ability to support and promote a culture of cybersecurity awareness and operational accountability throughout the organization.
• Ability to establish and maintain effective working relationships with assigned supervisors, other City employees, elected officials, vendors, and the general public.
• Ability to interpret and apply Federal, State, and local policies, procedures, laws and regulations.
• Ability to communicate effectively with others, both orally and in writing, using both technical and non-technical language.
• Ability to understand and follow oral and/or written policies, procedures and instructions.
• Ability to prepare and present accurate and reliable reports containing findings and recommendations.
• Ability to operate a personal computer using standard or customized software applications appropriate to assigned tasks.
• Ability to use logical and creative thought processes to develop solutions according to written specifications and/or oral instructions.
• Ability to perform a wide variety of duties and responsibilities with accuracy and speed under the pressure of time-sensitive deadlines.
• Ability and willingness to quickly learn and put to use new skills and knowledge brought about by rapidly changing information and/or technology.
• Ability to obtain and maintain relevant certifications as required.
• Demonstrates integrity, ingenuity, and inventiveness and the use of the appropriate levels of discretion in the performance of assigned tasks.
• Consistently performs assignments in accordance with the City’s Core Values of Integrity, Leadership, Service and Teamwork.

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker
• Microsoft, Cisco, or Palo Alto security certifications