Description

You will lead a six-person security team, owning daily operations, SLR/SLA compliance, and P1/P2 incident escalation. You manage the Palo Alto firewall environment via Panorama, oversee Qualys vulnerability management, and maintain Infoblox DNS/DHCP/IPAM services. You author compliance documentation for NIST 800-53, CIS Controls, and CJIS frameworks, and serve as the primary liaison with the City of San Diego.

Responsibilities

• Lead and mentor a team of six security professionals, managing workload, performance reviews, and development planning.
• Own the Palo Alto firewall environment (24 devices via Panorama), ensuring rule optimization, policy lifecycle, and CIS Benchmark alignment.
• Oversee monthly Qualys vulnerability scanning, CVSS-based prioritization, and remediation tracking across engineering teams.
• Manage Infoblox DNS, DHCP, and IPAM services, ensuring availability, accuracy, and proper change management documentation.
• Produce audit-ready compliance documentation aligned to NIST 800-53 Rev 5, CIS Controls, NIST CSF 2.0, and CJIS, supporting quarterly MSA reporting.

Required Skills

• 5+ years of experience in IT security operations or service management.
• 2+ years of experience managing or leading technical security teams.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• CISSP, CISM, or CISA certification required.
• PMP certification required.
• Strong working knowledge of NIST CSF 2.0, NIST 800-53 Rev 5, and CIS Controls.
• Experience managing SLR/SLA obligations in a managed services or enterprise IT environment.
• Proficiency with ITSM platforms (ServiceNow preferred) for ticket management and reporting.

Preferred Skills

• Hands-on experience with Palo Alto Networks firewalls and Panorama centralized management.
• Familiarity with Qualys vulnerability management and Infoblox DDI administration.
• Knowledge of CJIS Security Policy requirements and public sector IT environments.

Key Skills

Education

Bachelor's degree