CYBERSECURITY ANALYST

CYBERSECURITY ANALYST

INNOVATION AND TECHNOLOGY

CITY OF WORCESTER

The City of Worcester is seeking qualified applicants for a Cybersecurity Analyst in the Innovation and Technology Department. The Cybersecurity Analyst plays a critical role in protecting the municipality's digital infrastructure. Under the direction of the Cybersecurity Manager, this position is responsible for the day-to-day operation of security tools, identifying and responding to threats, and supporting compliance with local, state, and federal regulations. The Cybersecurity Analyst collaborates with IT, legal, public safety, and other departments to reduce risk, enhance resilience, and ensure the secure delivery of public services.

Bilingual applicants are encouraged to apply.

ESSENTIAL ELEMENTS :

• Participate in the planning and design of enterprise security architecture and business continuity / disaster recovery plans under the direction of the Cybersecurity Manager.
• Contribute to the development and maintenance of cybersecurity policies, standards, baselines, guidelines, and procedures.
• Stay current with industry trends, threat intelligence, and emerging technologies to inform security strategy.
• Recommend and assist in the selection of new security solutions or enhancements to existing tools.
• Perform deployment, integration, and initial configuration of new or upgraded security solutions in accordance with best practices and internal standards.
• Maintain detailed knowledge of the IT security industry, including awareness of new threats and mitigation techniques.
• Monitor and maintain the secure configuration and operation of all in-place security solutions and monitor security posture of other IT assets (e.g., workstations, servers, network devices).
• Analyze logs and alerts from SIEM, IDS / IPS, and endpoint protection systems to detect and respond to threats in real time.
• Conduct vulnerability assessments, penetration tests, and security audits; coordinate remediation with system owners.
• Maintain operational baselines and ensure compliance with internal security documentation.
• Provide on-call support for security-related incidents and user inquiries.
• Lead or assist in incident response activities, including containment, investigation, documentation, and post-incident reviews.
• Maintain and test the incident response and disaster recovery plans.
• Track and report on key risk indicators (KRIs) and security metrics to IT leadership.
• Ensure systems and processes comply with applicable regulations (e.g., CJIS, HIPAA, MA 201 CMR 17.00).
• Assist with internal and external audits, including evidence collection and remediation tracking.
• Maintain documentation for security controls, risk assessments, and audit readiness.
• Partner with departments to assess cybersecurity needs for new applications and services.
• Work closely with and support the Cybersecurity Training & Support Specialist.
• Participate in regional cybersecurity working groups and information-sharing initiatives.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES :

MINIMUM REQUIREMENTS :

PREFERRED QUALIFICATIONS :

Any of the following certifications :

SALARY RANGE : $93,232 - $122,661 annually, full-time, exempt, with an excellent benefits package.

To apply, please visit : www.worcesterma.gov / employment or send resume and cover letter to : City of Worcester, 455 Main Street, Room 109, Worcester, MA 01608. OPEN UNTIL FILLED, applications received prior to or on FRIDAY, NOVEMBER 21, 2025, will receive preference. Preference is given to Worcester residents. The City of Worcester is an equal opportunity, affirmative action employer. Women, minorities, people with disabilities and protected veterans are encouraged to apply. Direct inquiries to : City Hall, Human Resources, Room 109, 508-799-1030, Hiring@worcesterma.gov .