> Markdown version of [/jobs/ext/2599327-cybersecurity-administrator](https://www.wearedevelopers.com/jobs/ext/2599327-cybersecurity-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Administrator - **Company:** City of Tucson - **Location:** Tucson, AZ, United States - **Experience:** Experienced - **Salary:** $73,570.0 - $110,344.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, Application Firewall, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Internet Security, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Linux Distribution, Microsoft Security Essentials, Windows Servers, Windows PowerShell, Regular Expressions, Zero Trust Network Access, Cyber-physical Systems, Security Information and Event Management, Wireshark, Virtualization Technology, Software Vulnerability Management, Scripting, Google Cloud, Cyber Threat Analysis, NetScout, Information Technology, Process Control Systems, Operational Systems, Gsuite, CIS Benchmarks, Splunk, Network Server, Cisco, Security Orchestration, Automation & Response - **Published:** August 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=1910928e3e04a8cc ## About the Role Candidates must be legally authorized to work in the United States at the time of application and throughout the duration of employment., Bachelor's degree, Three (3) years of relevant experience Equivalency Any combination of relevant education and experience may be substituted on a year-for-year basis., Preferred Qualifications: Degree in Cybersecurity, Information Technology, Computer Science, or a related field. GIAC certifications, such as: GCIH - GIAC Certified Incident Handler GSEC - GIAC Security Essentials Certification GSTRT - GIAC Security Threat Intelligence (ISC)² certifications, such as: CISSP - Certified Information Systems Security Professional SSCP - Systems Security Certified Practitioner CompTIA certifications, such as: Security+ CySA+ - Cybersecurity Analyst Equivalent certifications from other recognized industry organizations Experience in: Endpoint detection and response (EDR) platforms such as CrowdStrike Falcon, Carbon Black, and Microsoft Defender XDR, including investigation and response workflows. SIEM administration and detection engineering using tools such as Splunk and Falcon LogScale, including use of regex, dashboard development, and alert tuning. Security automation and scripting, including PowerShell, Python, Bash, and regex, for threat detection, remediation workflows, and data parsing. Network and forensic analysis tools, such as Wireshark, NetScout, and capabilities in network, memory, and endpoint forensics. Cloud administration and security across platforms such as Google Cloud Platform (GCP), Google Workspace, and Azure, including IAM integration and security control implementation. Firewall administration (e.g., Palo Alto), Cisco CLI, and virtualization technologies. Various operating systems including Windows Server 2016/2019, Windows 7-11, macOS, and Linux distributions using CIS benchmarks and secure baselines. Email and threat protection systems such as Proofpoint TAP/TRAP and cloud-native defense. Collaboration, problem-solving, and continuous learning mindset with ability to work across teams and adapt to evolving threats., This position has been designated to require a criminal background check. The City of Tucson is a Second Chance Employer. ## Description This position is based on-site at a City of Tucson facility. Remote or hybrid work arrangements are not available at this time. Applicants who meet the minimum qualifications may be evaluated and scored based on their relevant education, experience, and training, as outlined in the job bulletin. The highest-scoring applicants will be invited to participate in a virtual interview via Microsoft Teams., Candidates are responsible for all costs associated with relocating to the Tucson area, if applicable. Candidates who are placed on the Civil Service Eligibility List and receive a contingent offer of employment must successfully complete the following: An extensive background investigation, including local, state, and national criminal history and fingerprint checks., The Cybersecurity Administrator position at the City of Tucson's Information Technology Department is responsible for designing, implementing, and optimizing cybersecurity solutions to protect the City's infrastructure- including cyber-physical systems and operational environments. This role supports strategic initiatives by deploying and tuning tools and developing automation to enhance detection and response. Worked is performed under the supervision of the Information Technology Manager. This position does not supervise. Duties and Responsibilities * Designs cybersecurity solutions that protect enterprise Information Technology (IT) and Operational Technology (OT) environments, including Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS). Implements and maintains tools such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), vulnerability management platforms, email security, and cloud-native solutions. Collaborates with cross-functional teams to embed security into technology projects and deployments. Supports cloud migrations by reviewing architecture and offering secure configuration guidance. * Develops threat detection capabilities by creating custom correlation rules, dashboards, and alerts. Optimizes incident response by identifying patterns and gaps. Automates security workflows to streamline operations and reduce response times. * Conducts technical investigations using log correlation, forensic analysis, and root cause identification. Responds to cybersecurity incidents in real time. Coordinates remediation efforts with IT and operations teams to restore services and prevent recurrence. * Monitors systems continuously using security tools and telemetry data. Identifies misconfigurations, vulnerabilities, and signs of malicious activity. Prioritizes risks based on severity and impact. Recommends remediation actions using current threat intelligence. * Provides education and technical advice for securing systems and field devices, including servers, workstations, mobile devices, and OT assets. Aligns system settings with Center for Internet Security (CIS) Benchmarks, National Institute of Standards and Technology (NIST) guidelines, and City policy. * Implements technical controls based on Zero Trust architecture and the NIST Cybersecurity Framework (CSF). Maintains secure access, data protection, segmentation, and endpoint visibility to enhance resilience and meet regulatory requirements. * Develops security documentation such as configuration guides, standard procedures, and internal knowledge base articles. Maintains documentation to support consistent operations, training, and audit readiness. * Performs all other duties and tasks as assigned. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)