Cybersecurity Expert ITT- SFO

Company Description

San Francisco International Airport (SFO) is the largest airport in the Bay Area, serving more than 54 million guests in FY 2025. As an enterprise department of the City & County of San Francisco, SFO has approximately 1,900 city employees and a mission to deliver an airport experience where people and the planet come first.

Job Title:

Cybersecurity Expert I
Appointment Type:
Permanent Exempt (PEX) – Category 12

Location:

San Francisco International Airport – ITT Division
Compensation: $167,804 – $211,094 per year

Work Schedule:

Full‑time, 40 hours per week
Recruitment ‑9976‑160108

• Serve as the primary subject‑matter expert for information security and cyber‑security across SFO’s ICT and IC S environments.
• Lead the design, implementation, and monitoring of remote‑access mechanisms and technical controls such as multi‑factor authentication, public‑key encryption, SAML, and firewall configurations.
• Assess and improve the effectiveness of existing processes, procedures, controls, and safeguards to prevent cyber‑security breaches across the Airport’s infrastructure.
• Maintain SFO’s vulnerability management program—including patch management, vulnerability scanning, and monthly status reporting.
• Respond to cybersecurity threats and incidents, providing technical guidance for remediation and coordinating follow‑up activities based on severity and exploitability.
• Coordinate the design, implementation, and testing of remediation activities arising from cybersecurity assessments and audits.
• Administer penetration testing of SFO networks and systems; document and ensure timely resolution of infractions from annual pen tests.
• Manage the implementation of corrective measures while adhering to change‑control policies; this may involve site visits, remote system management, and participation in technical committees.
• Collaborate with other Airport sections, City departments, vendors, and federal agencies on information security matters.
• Prepare and review cybersecurity documentation, specifications, and procedures, and provide training on cybersecurity technologies and tools to IS and non‑IS professionals.
• Engage in other duties as assigned that support SFO’s overall security posture.

• Education: Associate degree in computer science, computer engineering, software engineering, or a closely related field from an accredited institution, or equivalent credit total (at least 60 semester credits with 20 in the field).
• Experience: Five (5) years of experience analyzing, installing, configuring, enhancing, and maintaining enterprise network components.
• Substitution: Required degree can be substituted with up to two (2) years of relevant experience, or completion of the Information Systems Trainee Program.

• At least two (2) years designing, implementing, and managing security policy on Palo Alto Networks firewalls in a complex environment.
• At least two (2) years managing a cybersecurity vulnerability management program using tools such as Crowdstrike EDR/MDR.
• At least two (2) years creating accurate network and data‑flow diagrams to establish firewall policy.
• At least two (2) years supporting Microsoft Entra d joined devices and responding to related incidents.
• At least two (2) years contributing to large, multi‑year IT cyber‑security projects in a government environment.
• Ability to meet IC‑710 requirements for Controlled Unclassified Information (CUI).
• Ability to obtain a National Security Clearance.

Application Process:

Submit an application online through City & County of San Francisco Careers (deadline: Friday, March 13 2026, 5:00 p.m.). Applications must include all required documentation; incomplete submissions may result in disqualification.

Selection Process:
Eligibility will be based on minimum qualifications and the entire application package. Selected candidates may be invited to interview; advancing to interview is not guaranteed for all qualified applicants.

TSA security clearance is required; a criminal history check, FBI fingerprints, and a security threat assessment will be performed. Candidates must also pass a medical examination to verify the ability to perform essential functions.

The City and County of San Francisco is an equal opportunity employer. We encourage women, minorities, and persons with disabilities to apply. All applicants will be considered without regard to sex, race, age, religion, color, national origin, ancestry, physical or mental disability, medical condition, HIV/AIDS status, genetic information, marital status, sexual orientation, gender identity, military or veteran status, or any other protected category.