Enterprise Principal Technology Analyst

We need to output HTML fragment with sections: About the role? Actually we have "About The Department" and "Position Duties". Also "Minimum Qualifications". Also "Other Qualifications" (but truncated). Also "Salary Information". Also "Please note that the Cybersecurity Operations Manager position is currently eligible for a hybrid telework schedule." That's schedule info. We must not repeat job title as heading. Use

for section headings (e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We need to map content to appropriate headings. We have: - About The Department: could be "About the role" or maybe "About the department". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should use those exact headings when we have content. Thus: - About the role: could contain description of department and mission. Use paragraph(s). - Responsibilities: list of duties (the long list). Use

• . - Requirements: maybe Minimum Qualifications? Or "Requirements" could include Minimum Qualifications and Other Qualifications. We'll put Minimum Qualifications under Requirements. - Qualifications: maybe Other Qualifications? But we have truncated. We'll include whatever is there. - Skills: maybe the list of technical expertise areas (Network security, etc.) could be Skills. - Benefits: not mentioned except maybe hybrid telework schedule? That's schedule. Benefits not given. - Pay: Salary Range and note about 5% ongoing non-pensionable compensation. - Schedule: hybrid telework schedule note. We must not create sections with filler like "not specified". So only include sections where we have real content. We need to preserve all substantive information; do not invent or summarize away detail. Must not include boilerplate like EEO, accommodation contact, etc. Also remove duplicated lines, navigation, cookie, legal, EEO, scam-warning, application instructions (like first review date, submit by time). Those are boilerplate? The instruction says remove application instructions. So we should remove the note about first review date and submit by time. Also remove "Visit here to learn more..." etc. Also remove EEO statement and accommodation contact. Also remove "Visit the Information Technology Department’s website..." etc. We need to keep substantive content: department description, mission, ITD mission, etc. Also position duties, key duties list, technical expertise list, minimum qualifications, other qualifications (though truncated), salary info, hybrid telework schedule. We must not include the "NOTE – The first review of applications will be on September 28,2026. Please submit your application by 11:59 p.m. (PST), if you would like your application to be included in the first review." That's application instruction -> remove. Also remove "Position Duties" heading? We'll replace with appropriate headings. We need to output only HTML fragment, no /, no markdown fences. Let's craft:

  About the role

  ... department description ...

  But we have multiple paragraphs about department. We'll combine into maybe two paragraphs. Content from "About The Department" paragraph: "The City of San José innovates to provide exceptional civic services using advanced technologies to help our community thrive. As one of the largest cities in the nation, the City manages a large set of services and assets and operates on a budget of $6.2 billion, with approximately 7,000 employees, serving about 1 million residents and 80,000 businesses in the heart of Silicon Valley. The Information Technology Department’s (ITD) mission is to enrich the quality of life in San José through innovation, collaboration, and engagement. ITD enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, responsible use of Artificial Intelligence (AI), productivity and collaboration tools, the San José 311 resident experience platform, data equity and privacy programs, and strategic planning. San José is powered by truly great people, a robust technology environment, and a strong sense of purpose. The IT department is a leader in innovation, embracing cutting-edge technologies and pioneering solutions to enhance efficiency and quality of life in San José. As part of this effort, the City leads a national initiative for AI through the GovAI Coalition, which was established to give local governments a voice in shaping the future of AI, ensuring it is developed responsibly and for the public good. Promoting the City’s commitment to equity and inclusion, we believe that all members of the community, regardless of background, have access to the tools and resources needed to thrive in the digital age. San José is in the heart of Silicon Valley, which boasts a rich history in technology, education, and agriculture. Over half of San José residents speak a language other than English at home, highlighting the importance of language accessibility in all City services. By fostering inclusivity, promoting digital literacy, and building accessible platforms, we are advancing technology while creating a more equitable future for everyone. At the City of San José, we promote work-life alignment and a focus on growth to bring out the best in our people. Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation!" We can keep that as paragraph(s). Might be long but okay. Then responsibilities: The duties list after "Key duties include but are not limited to:" plus preceding paragraphs describing role. We'll combine all duty descriptions into a list. We need to extract each duty bullet: The text after "Key duties include but are not limited to:" includes many sentences each starting with a verb. We'll turn each into
• . List: - Provide hands-on technical leadership, mentoring, prioritization, and quality assurance while coordinating with infrastructure, network, endpoint, cloud, application, identity, and service desk teams to reduce enterprise cybersecurity risk. - Lead the collection, analysis, and operational use of cyber-threat intelligence to identify emerging threats, vulnerabilities, attacker techniques, and indicators of compromise. - Translate intelligence into actionable defenses, including detections, hunting queries, blocking rules, advisories, and risk-based recommendations that support incident response, vulnerability management, security engineering, and leadership reporting. - Lead cybersecurity emergency response for suspected or confirmed security incidents, including triage, containment, eradication, recovery, root-cause analysis, and post-incident improvement. - Provide technical direction during high-pressure events involving phishing, malware, credential compromise, unauthorized access, data exposure, endpoint compromise, cloud compromise, network intrusion, or advanced threats. - Build and maintain security operations standards, process flows, incident response playbooks, escalation procedures, evidence-handling practices, and clear incident documentation. - Lead cybersecurity projects and operational initiatives by defining scope, milestones, deliverables, dependencies, risks, and success criteria; coordinating cross-functional technical teams, vendors, and stakeholders; tracking progress; resolving blockers; communicating status; and ensuring timely delivery of measurable security and operational outcomes. - Lead the design, implementation, tuning, and continuous improvement of enterprise security controls across network, endpoint, cloud, identity, email, data protection, remote access, logging, monitoring, and automation environments. - Ensure security tools are properly configured, integrated, monitored, and producing actionable outcomes. - Partner with technical teams to review proposed changes, identify risks, recommend compensating controls, and embed security into enterprise solutions. - Oversee the development, validation, tuning, and continuous improvement of detection logic across SIEM, EDR/XDR, network, identity, cloud, and email security platforms. - Lead threat-hunting activities to identify suspicious behavior, control gaps, misconfigurations, compromised accounts, lateral movement, persistence, and other indicators of attacker activity. - Improve detection coverage, reduce false positives, and measure operational effectiveness. - Independently lead comprehensive cybersecurity risk reviews of complex technology implementations, including out-of-the-box vendor solutions, cloud platforms, SaaS applications, infrastructure services, endpoint tools, network technologies, IoT systems, and desktop environments. - Evaluate default configurations, architecture decisions, access models, logging, data protection, integration points, and operational impacts; identifies security gaps and risk exposure; and develops practical risk-reduction strategies, compensating controls, secure configuration requirements, and implementation guidance to ensure solutions are securely deployed and operated. - Support audit, compliance, and risk-management activities with technical evidence, control validation, and remediation support. We should keep the exact wording. Then Requirements: Minimum Qualifications. We need to include the text: "Minimum Qualifications Education and Experience: A Bachelor’s Degree from an accredited college or university in a relevant field AND five (5) years of increasingly responsible professional/ level experience in computer applications, systems, networks, or telecommunications work, of which at least two (2) years include responsibility in the development, implementation, and maintenance of electronic business systems/solutions, or application development and/or support. Acceptable Substitution: Additional years of increasingly responsible directly related work experience may be substituted for education on a year-for-year basis up to two (2) years. Completion of a Master's Degree in a relevant field from an accredited college or university may be substituted for one year of the required two (2) years of experience in the development, implementation, and maintenance of electronic business systems/solutions, or application development and/or support." We'll put that in

  under Requirements. Other Qualifications: The text truncated: "Other Qualifications The ideal candidate will possess the following competencies, as demonstrated in past and current employmen". It's incomplete; we cannot invent. Since it's truncated, we should not include it because it's not substantive? The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. If it's truncated, it's not substantive; maybe we should omit it because it's incomplete. Better to omit. Skills: The list of technical expertise areas: "The successful candidate must demonstrate strong technical expertise and experience in the following areas: Network security, including firewalls, segmentation, routing, VPN, DNS, web filtering, secure remote access, and network traffic analysis. Endpoint security, including EDR/XDR, malware analysis concepts, host-based investigation, endpoint hardening, and containment strategies. Identity security, including Active Directory, Entra ID/Azure AD, MFA, privileged access, conditional access, account compromise investigation, and identity-based attack paths. Cloud security, including cloud logging, identity integration, access control, workload protection, SaaS security, and cloud misconfiguration risk. Security monitoring, including SIEM use cases, detection logic, log source onboarding, alert tuning, threat hunting, and incident investigation. Incident response, including triage, containment, eradication, recovery, root-cause analysis, evidence preservation, and after-action reporting. Threat intelligence, including analysis of attacker behavior, indicators of compromise, tactics, techniques, procedures, and operationalizing intelligence into controls. Security architecture, including defense-in-depth, zero trust principles, least privilege, secure design reviews, compensating controls, and enterprise risk reduction." We can put that under Skills as a

  • each area maybe. Pay: Salary Information: "Salary Information: The final candidate’s qualifications and experience shall determine the actual salary. In addition to the starting salary, employees in the Enterprise Principal Technology Analyst (EPTA) classification shall also receive an approximate five percent (5%) ongoing non-pensionable compensation pay. Salary Range $163,035.60 – $198,525.60" We'll put under Pay. Schedule: "Please note that the Cybersecurity Operations Manager position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change." We'll put under Schedule. We must not include application instructions (first review date, submit by time). Also remove EEO etc. Now construct HTML. We'll have sections in order: About the role, Responsibilities, Requirements, Qualifications? Actually we have Other Qualifications omitted; we could combine Requirements and Qualifications? But we have Skills separate. We'll follow headings: About the role, Responsibilities, Requirements, Skills, Pay, Schedule. We might also include a Qualifications section for Minimum Qualifications? But we already have Requirements. The instruction list includes Qualifications as a possible heading. We could put Minimum Qualifications under Requirements, and Other Qualifications under Qualifications (but it's truncated